doc: Explain how the security mirror is targeted

Improve the release documentation, adding details on how the release-bot tooling targets the security mirror of Gitaly for auto-deploys.