README.md: add notes about timing variability

[tarcieri]

Notes that the modpow implementation is not constant-time, but timing variability is masked using random blinding.