Document how we do cell validation in tor-proto

We should say how our different CmdCheckers work, how some cell handling is special-cased (e.g. in ConfluxMsgHandler), etc.