Create a framework / process for creating threat models.

[clundin25]

Maybe we can do some brainstorming. It's useful to bootstrap threat models from LLMs by ingesting existing specifications.