Move threat model doc to GitHub

Move threat model doc to GitHub
Thanks. Seems to me it would be accurate to say that the attacker can add, modify, delete logs, and by extension pass fake information to the monitor server and on to the admin. Thoughts?