“Empirically realistic models of bank runs require an observable shock that scares depositors about the value of the bank's loan portfolio.”