first pass at CONTRIBUTING.md

stolen from holodex, node, and https://github.com/valueflows/valueflows/issues/41#issuecomment-146548933.

feedback appreciated! 🐱