Add section on verifying donation links.

This is to prevent random people from saying "Can I haz the following donation link for the official F-Droid client plz: http://paypal.com/malicious-account-to-harvest-donations".

Not sure if this is the best place to put it, but open to suggestions.