Move threat model doc to GitHub

Move threat model doc to GitHub
They can also delete sources, which will destroy all of the communication with that source, and prevent that source from logging in with their old codename in the future.