Add THREAT_MODEL.md per the Apache security threat-model rubric#1224

jamesfredley wants to merge 2 commits into

apache:8.0.xapache/grails-spring-security:8.0.xfrom

jamesfredley:docs/threat-model-8.0.xjamesfredley/grails-spring-security:docs/threat-model-8.0.xCopy head branch name to clipboard