Threat-model your agentic system: a four-question workflow