Move threat model doc to GitHub

Move threat model doc to GitHub
Well, most academic research suggests it is pretty easy. Mike Perry thinks it's harder in a real world situation that is commonly represented in research papers due to the base rate fallacy, which is quite reasonable. But that's not what you've stated here.