“Al-Qa'ida does not follow a traditional command structure, wear uniforms, carry its arms openly, or mass its troops at the borders of the nations it attacks. Nonetheless, it possesses the demonstrated capability to strike with little notice and cause significant civilian or military casualties.”