Modify README to describe building in a Cabal sandbox

This requires Cabal 1.18 or later, however strictly speaking the package
does not require such a recent Cabal version. It is still possible to
build without a sandbox if the platform provides the dependencies.