Ukraine’s gains expose thinly spread Russian invaders. More could follow