Feat: docs: threat model

Closes #65 (closed).

Merge request reports