Move threat model doc to GitHub

Move threat model doc to GitHub
This is not the only way to write a threat model, and we will be improving and iterating on this as we go. But this is a good start.