Merge pull request #363 from potiuk/asf-security/threat-model-discoverability-2026-07-15 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md); rename draft-THREAT-MODEL.md -> THREAT_MODEL.md