Add ThreatActor and tests
Reorder imports to prevent circular dependencies