SoK: A Framework and Guide for Human-Centered Threat Modeling in Security and Privacy Research — Oakland 2025