Move threat model doc to GitHub

Move threat model doc to GitHub
This assumption should be stated earlier in the section about assumptions, if it isn't already.