The ties between the PM and an ex-KGB officer, first revealed in the Observer three years ago, could be Johnson’s lasting legacy