I did not run these commands on chi-node-10, and the login console works
fine via both the iDRAC and the java console.

These settings were tested to work on the PowerEdge R610 servers. Also
this moves the instructions under "Serial console access" section
instead of "Other BIOS config".

This moves goals, approvals, alternatives, and costs to the policy
template. It seems we often forgot about those items when writing
policy and would end up filling them up only when writing the service
docs, which is too late for many of those.

We keep a cross-reference to the policy in the service docs though.

people will figure it out on their own

This worked well in TPA-RFC-15.

This makes it so it has a chance of upgrading config files that might
have changed after bullseye. It will not necessarily remove the
conflict files, but will make the cleanup certainly easier.

In fact, we could also fix clean_conflicts to automatically resolve
those as well.

but at least we're in sync with the template now

Initial draft for a security policy

See merge request !26

Remove gitlab.torproject.org from ssh-jumphost

See merge request !25

Since gitlab.torproject.org is accessible from outside the internal
network, it can be removed from ssh jump host configuration.