Add more information around Snap companion dapps and allowed origins

Snap companion dapps are not thoroughly documented. This issue is to clarify what they are, when they're needed, and how to restrict access to them using [RPC allowed origins](https://docs.metamask.io/snaps/reference/permissions/#endowmentrpc). Providing some examples of companion dapps would be useful.