My read is that you don't need to share any third-party assets (e.g. stuff you buy on itch.io) if their license doesn't allow it. But your code, your own assets, and any third-party assets you *are* allowed to share (e.g. kenney's CC0-licensed stuff) need to go into the git repo.