Move threat model doc to GitHub

Move threat model doc to GitHub
Updated to say that the server stores the plaintext alerts on disk, data may also reside in RAM.