docs: add comprehensive threat model for privacy pool

[Genmin]

Summary

• add docs/THREAT_MODEL.md covering the current Soroban contract and Noir circuit attack surface
• document threat actors, attack vectors, mitigations, residual risks, and incident response guidance
• call out the highest-priority audit targets at the circuit/contract boundary

Validation

• cargo test

Closes #19