secure apt docs

Here is my attempt at some reasonably complete docs on how secure apt works, after observing the rampant confusion about this on debian-user lately.