Move threat model doc to GitHub

Move threat model doc to GitHub
agent-control is the part of ossec that allows the server to perform actions on the agent. As @garrettr mentioned active-response is disabled in the server and agent config files so it should not be able to run arbitrary commands without a leveraging something else.

http://ossec-docs.readthedocs.org/en/latest/programs/agent_control.html