[doc]: Transaction Security Policy Setup

[dmoruzzi]

Describe your changes

Issue ticket number and link

Close #997

Checklist before requesting a review

• I have read and understand the Contributions section
• Target branch is releaseCandidate and not master
• I have performed a self-review of my code
• I ran the unit tests and my PR does not break any tests
• I documented the changes I've made on the CHANGES.md and followed actual conventions
• I added a new section on how-to.md (optional)

[tprouvot]

Hi @dmoruzzi Thanks for the PR this is a great start !
I worked on a generic repo regarding TSP that could contains some info we can add:

https://developer.salesforce.com/docs/atlas.en-us.soql_sosl.meta/soql_sosl/sforce_api_calls_soql_select_dateformats.htm
I am referring to -1 for RowsProcessed for big objects and DataCloud.

Another use case I wanted to add in the documentation was the restriction of a particular population for the same org:

• delegated admins that are allowed to use Reloaded but not to export data
• sys admins without restrictions

To be able to do that, we must use API Access Control + standard connected app for delegated admins.
In the TSP, instead of defining a client Name, we will use the ConnectedAppId.

Sys admins will have to define an external client app in their Reloaded settings .

There is no need to demonstrate the creation with a gif, but I think it can be useful to detail it in the md file

[tprouvot]

I think this section can be removed since we can achieve the same thing with the flow builder