Add threats to catalog #409
Description
Similar to the FINOS Common Cloud Controls, we should add a catalog of threats that we tie Baseline controls to. From there, we can validate the applicability of controls, including controls that are missing, extraneous, or misaligned.
(Assigning to Eddie for overall coordination, but there's a lot of work to share among the team)