Tim Bosma’s killer was “cascaded” from maximum security prison down to medium two years ago. But it was a well-guarded secret until last week, writes Susan Clairmont