From French president Emmanuel Macron to ordinary whistle-blowers, the surveillance software Pegasus has been used to target thousands of people. Investigative journalists Laurent Richard and Sandrine Rigaud tell its story and explain why no one is safe