Themis sets the signal threshold for positive and negative selection in T-cell development