This enables the Threat Monitoring feature by default (and can be
disabled by explicitly disabling the `threat_monitoring` feature flag).

This also adds some basic documentation for Threat Monitoring.

Part of [WAF statistics reporting][1].

[1]: https://gitlab.com/gitlab-org/gitlab/issues/14707