Move threat model doc to GitHub

Move threat model doc to GitHub
This bullet point seems unlike the others in this section. The other points follow the form of assumptions about the organization's state or behavior. This point describes a potential situation but not how the organization responds.