A damaged parcel, left unclaimed in a warehouse, turned out to hold a homemade bomb – and exposed a young Russian's years-long entanglement with Moscow's security service, and the wife he drew into it.