Add Threat Model; route vulnerability reports to private disclosure (#269) New structured Threat-Model page (boundary, trusted/untrusted surfaces, sinks, the DoS-not-RCE guarantee, and the is-this-a-security-bug test). Security and Reporting-Bugs now send suspected vulnerabilities to GitHub private reporting / SECURITY.md instead of a public issue; sidebar links the new page.