Move threat model doc to GitHub

Move threat model doc to GitHub
It makes more sense in "What an attacker can achieve when controlling the source's or journalist's network", with the additional note about being able to forge certs.