[6.5] Add no-eval eslint rule to docs

Add reference to the eslint `no-eval` rule to the README.

This rule is already set to `error` in best-practices.js in eslint-airbnb-config-base.