Restrict base version bounds.

unsafePerformIO was finally deleted out of Foreign in base 4.7.