Add hint not to use `sudo`

As discussed in google/web-starter-kit#547, newer developers
should know that using `sudo` for `npm install -g` is a bad idea.

Fixes #1013.