In 2017, a British-born terrorist detonated a suicide bomb at a pop concert, killing 22 people. Five years on, the truth of what happened is finally emerging