Move threat model doc to GitHub

Move threat model doc to GitHub
I'd also argue - show the source has a least visited a SecureDrop site and gone through the "Submit" flow (although they will not be able to see if they have submitted anything).