Merge "docs: add threat model code owners" into integration