docs: security: Describe the Kernel Assurance Plane design

Thank you for your contribution! Sashiko AI review found 1 potential issue to consider: - [Low] docs: security: kap: contradictory epoch semantics for bound tasks – commit 77da64268c0c9921ecf4f2c4