Security Fundamentals and Threat Modeling for RAG