Move threat model doc to GitHub

Move threat model doc to GitHub
which *may* include plaintext of submissions made within the past 24 hours