Document eBPF verifier and scheduler safety review checklist

[alexchen-sys]

Turn the security model into a PR review checklist covering map lookups, bounded memory access, starvation risks, privileged attach flow, and CI/release safety.