Move threat model doc to GitHub

Move threat model doc to GitHub
Now that we specifically recommend in the web interface that sources should memorize their codenames (but we encourage them to start by writing it down, and eventually destroying it), I feel like we should add some context about those instructions to this section.