Move threat model doc to GitHub

Move threat model doc to GitHub
See any *replies from journalists* that the source has not yet deleted. They cannot see prior submissions.