Document security and auth behavior

We've had some user confusion about the detail of how logins work, which users can/can't do which things on which servers, etc.: https://github.com/clockworklabs/SpacetimeDB/issues/2451