Generates a STRIDE-based threat model, assigns CVSS scores, and recommends mitigations (OWASP, NIST).
