Document security behavior w.r.t. how identities work

[bfops]

We've had some user confusion about the detail of how logins work, which users can/can't do which things on which servers, etc.: clockworklabs/SpacetimeDB#2451

[bfops]

this needs more clarifying about the scope of this ticket