feat: subcontrol permissions via control, cli for subcontrol

[golanglemonade]

• Updates the fga model for subcontrol's to inherit their permissions from the a required control
• Updates the subcontrol schema to require a control edge on creation, and a hook to ensure all controls are not removed from the subcontrol
• Adds permissions for creation, edit and query access to subcontrols
• Adds the cli commands for subcontrols

Creation of subcontrol:

go run cmd/cli/main.go subcontrol create -n sc-2 -c 01JE7AZAT26T7QE5M91F5MNP1M -z json
{
  "createSubcontrol": {
    "subcontrol": {
      "class": "",
      "controls": [
        {
          "id": "01JE7AZAT26T7QE5M91F5MNP1M",
          "name": "sc2"
        }
      ],
      "createdAt": "2024-12-04T00:38:55.237217-07:00",
      "createdBy": "01JE57Y4YZ6A1TA1ZE7MV47E94",
      "description": "",
      "family": "",
      "id": "01JE89Q4VZC3DYBXDTV7PPSC4N",
      "implementationEvidence": "",
      "implementationStatus": "",
      "implementationVerification": "",
      "mappedFrameworks": "",
      "name": "sc-2",
      "source": "",
      "status": "",
      "subcontrolNumber": "",
      "subcontrolType": "",
      "updatedAt": "2024-12-04T00:38:55.231634-07:00",
      "updatedBy": "01JE57Y4YZ6A1TA1ZE7MV47E94",
      "version": ""
    }
  }
}

Controls now returns the subcontrol in the client:

go run cmd/cli/main.go control get -i 01JE7AZAT26T7QE5M91F5MNP1M -z json 
{
  "control": {
    "class": "",
    "controlNumber": "",
    "controlType": "",
    "createdAt": "2024-12-03T15:41:37.609989-07:00",
    "createdBy": "01JE57Y4YZ6A1TA1ZE7MV47E94",
    "description": "",
    "family": "sc",
    "id": "01JE7AZAT26T7QE5M91F5MNP1M",
    "mappedFrameworks": "",
    "name": "sc2",
    "programs": [
      {
        "id": "01JE580Q9NEJ04322ETB5NWR70",
        "name": "mitb program"
      }
    ],
    "satisfies": "",
    "source": "",
    "status": "",
    "subcontrols": [
      {
        "id": "01JE89PS7TH3PQXAAH2VAFX3N1",
        "name": "sc-2"
      },
      {
        "id": "01JE89Q21RH3K77P2WNXHTPBNB",
        "name": "sc-3"
      },
      {
        "id": "01JE89Q4VZC3DYBXDTV7PPSC4N",
        "name": "sc-4"
      }
    ],
    "updatedAt": "2024-12-03T15:41:37.602096-07:00",
    "updatedBy": "01JE57Y4YZ6A1TA1ZE7MV47E94",
    "version": ""
  }
}

Users with permissions to the control, can also view all (and update if they have edit permissions) the subcontrols

[sonarcloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
26.1% Coverage on New Code
3.3% Duplication on New Code

See analysis details on SonarQube Cloud