Move threat model doc to GitHub

Move threat model doc to GitHub
Ok, will take out "any other running services."