Update threat model and test descriptions

[ionut-arm]

Updating the threat model to include mentions of our security policy regarding Rust dependencies, and the list of types of tests we run.