charm: do not verify bundles on read

We have the BundleData.Verify method for that.
Clients can then decide for themselves whether to
verify the bundle data with charms or not.
add dev-version warning
adjust README
Merge pull request #37 from rogpeppe/012-no-verify-on-bundle-read

charm: do not verify bundles on read