Document our policy for Rust dependencies

We should document what our (experimental, subject to change) policies are w.r.t. new Rust dependencies in tor, somewhere in the doc/HACKING/ directory.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information