Move threat model doc to GitHub

Move threat model doc to GitHub
Right. It seems like this threat needs to be unpacked more. If a gov agency can compel them to do anything (including allowing an active attack on the server) then the rest of the analysis changes significantly (for the worse). Can they compel them to turn over passphrases? Or just the server full of encrypted info? Etc...