Move threat model doc to GitHub

Move threat model doc to GitHub
You do not need to be a global adversary to do this, you merely need to be active, capable of forging a valid cert, and in control of the source's network.