feat: control objectives and their permissions, group permissions mixin

[golanglemonade]

• Adds a new GroupPermissionsMixin that will add the group edges + hooks when added to a schema for viewer, editor, and blocked groups permissions
• Adds the control objective cli command
• Updates the fga model for control objective, sub controls, and controls to align with the risk permissions
• Updates the controlobjective schema to include the object owned mixin based on their parent program, and the new group permissions mixin for group based permissions
• Cleans up all existing schemas with group permissions to use the new mixin instead of adding manually to each schema
• Adds a WithOrganizationOwner to the object owned mixin to add the org owned field, edges, and hook to object owned schemas - this allows the fields to be added, without the parent inherited permissions
• Removes the duplicated FilterQuery interceptor from a few schemas (this is already the default interceptor for object owned schemas)
• Adds CRUD tests for control objectives

[sonarqubecloud]

Quality Gate failed

Failed conditions
12.3% Coverage on New Code (required ≥ 20%)
13.6% Duplication on New Code (required ≤ 5%)

See analysis details on SonarQube Cloud