feat: adds initial implementation for the fedramp-transform command

[jpower432]

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• My code follows the code style of this project.
• My change requires a change to the documentation. (compliance-trestle PR)
• I have updated the documentation accordingly. . (compliance-trestle PR)
• I have added tests to cover my changes.
• All new and existing tests passed.
• All commits are signed-off.

Summary

Blocked by #30

Partially addresses #20

This creates the fedramp-transform command and the initial classes.
This only populates the control origination values.

The description, implementation status, and parameter values will be on follow-on PRs.

Key links:

• Sonar coverage

[vikas-agarwal76]

Should these short names be in a const file? Also are these defined by FedRAMP or us?

[jpower432]

These are defined by FedRAMP here. I went back and forth over whether I should define them here or parse the xml file. I ended up defining them since the values seem to be very stable, but I can also see how that would not scale as easily as we add more FedRAMP specific values. Interested in your thoughts since fedramp resources are already being copied over.

[jpower432]

Also wanted to add that the control origination values in the xml do not cover the hybrid or shared values that are check boxes on the template, but the FedRAMP SSP template shows examples with multiple control origination values. So the logic on handling multiple control origination values and how they translate to hybrid and shared is defined here.

[jpower432]

@vikas-agarwal76 Putting this back into draft to address feedback I received around which check boxes are marked when properties are present (i.e. supporting multiple boxes being checked instead of a single box for each control)

[jpower432]

@vikas-agarwal76 I addressed your comment about putting the short-labels in the const.py. I also added support for multiple boxes to be checked at a time to better align with real word use cases.

[jpower432]

Closing in favor of #39