feat: get mapped controls resolver

[golanglemonade]

Adds new controlReports and controlReportByCategory resolvers to enable the control report in the UI. These will return simplfied data for the report, its based on the control object so the same filters work, but its not all the data that can be returned on the full control object. RelatedControls was also added to the control object so that the UI can pull organization + mapped framework controls without using the mapped control data and mapping them back

Example when filtered on framework (and refCode for simplicity). It returns the category, controls under each category with refCode, description, title, related controls (mapped controls based on mappedControl data but returns only those available in the organization if if the mapping is from a system-owned mapping), evidenceStatus, linkedPolicies with simple data, and subcontrols with all the same data.

{
  "data": {
    "controlReportsByCategory": [
      {
        "category": "Control Environment",
        "controls": [
          {
            "id": "01KTYJ9TEMAHNVCQQ5WVA8AHWW",
            "refCode": "CC1.1.1",
            "relatedControls": [
              {
                "refCode": "CC1.1",
                "id": "01KTYJFQ169EJB4G2F16GXMAZS",
                "description": "The entity demonstrates a commitment to integrity and ethical values (COSO Principle 1)",
                "isSubcontrol": false,
                "referenceFramework": "SOC 2"
              },
              {
                "refCode": "A1.2",
                "id": "01KTYJFQ169EJB4G2F1H1NZ14W",
                "description": "The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data backup processes, and recovery infrastructure to meet its objectives.",
                "isSubcontrol": false,
                "referenceFramework": "SOC 2"
              },
              {
                "refCode": "CC1.1.3",
                "id": "01KTYJ9TEMAHNVCQQ5WTJ2Y1MB",
                "description": "New hires are required to complete an acknowledgment form upon hire consenting to not disclose confidential or proprietary client and company information to unauthorized parties.",
                "isSubcontrol": false,
                "referenceFramework": null
              }
            ],
            "linkedPolicies": {
              "totalCount": 1,
              "internalPolicies": [
                {
                  "id": "01KTYAHYPNX96PES1JB95NKX6W",
                  "name": "Access Onboarding and Termination Policy",
                  "status": "DRAFT"
                }
              ]
            },
            "evidenceStatus": {
              "totalCount": 1,
              "worstStatus": "MISSING_ARTIFACT",
              "approvedCount": 0,
              "countByStatus": [
                {
                  "status": "MISSING_ARTIFACT",
                  "totalCount": 1
                }
              ]
            },
            "subcontrols": []
          }
        ]
      }
    ]
  },
  "extensions": {
    "auth": {
      "authentication_type": "api_token",
      "authorized_organization": [
        "01KTW6K1QRQ6DZRJ1GV1SHSF8S"
      ]
    },
    "server_latency": "41.510125ms",
    "trace_id": "qFmzjgSTjUZtMZSYECIwqFmCfzhiDZHM"
  }
}

[theopenlane-bender]

🔧 Configuration Changes Detected

This PR contains changes that will affect the Helm chart configuration. A draft infrastructure PR has been automatically created to preview these changes:

📋 Draft PR: https://github.com/theopenlane/openlane-infra/pull/1007

Changes Preview:

✅ Updated ConfigMap template

• 🔄 Merged Helm values.yaml
• 🔐 External secrets configuration updated
• ✅ Updated ConfigMap template

The draft infrastructure PR will be closed automatically after this core PR is merged.

[sonarqubecloud]

Quality Gate passed

Issues
7 New issues
0 Accepted issues

Measures
0 Security Hotspots
78.9% Coverage on New Code
1.0% Duplication on New Code

See analysis details on SonarQube Cloud