Security: expand threat model documentation

[Kerim-Sabic]

Goal

Expand SECURITY.md into a fuller threat model for public review.

Acceptance criteria

• Explains ticket capability behavior.
• Documents relay fallback and what relays can/cannot see.
• Covers local storage, key storage, QR/link sharing, and sender-online requirements.
• Lists practical user safety guidance.