Restructure BuildEnv threat model for clarity #1520
Description
This feels odd to me -- switching between talking about the BuildEnv track and the different entities in the process. Should there be headings or sections in here somewhere?
Originally posted by @arewm in #1479 (comment)