Move threat model doc to GitHub

Move threat model doc to GitHub
No, it only has the public key. Private keys are not generally used for encryption. The OSSEC alerts are not signed, so there is no GPG private key on the monitor server.