Allow multiple control files to add the same reference type

[yuumasato]

Description:

• Track references added by control files in Rule.control_references
• After everything is compiled by (compile_all.py), the Rule.control_references is merged into Rule.references.
  This still allows us to ensure that references are not cross added from rules and control files.
  To test this add, for example, bsi: APP.4.4.A9 to any OCP rule.
• With this commit, the references added by the control file are tracked separately from the references loaded from the rule.yml. This allows us to differentiate references coming from the rule, and references coming from the control file.

Rationale:

• The build system is currently limited to a single ref type per control file. Two control files cannot add the same reference type.

Review Hints:

• Checkout this PR Add Notes and Controls for SYS.1.6.A1-A4 #12161
  gh co 12161
• Cherry-pick this commit:
  git cherry-pick 927aeafe9f6f129c993191ecf140c88d5b0b0796
• Build OCP4 product
  ./build_product -d ocp4
• Check that Rule general_namespace_separation has two BSI references:

             <xccdf-1.2:reference href="https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf">APP.4.4.A1</xccdf-1.2:reference>
             <xccdf-1.2:reference href="https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf">SYS.1.6.A3</xccdf-1.2:reference>

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:12165
This image was built from commit: 927aeaf

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:12165

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:12165 make deploy-local

[codeclimate]

Code Climate has analyzed commit 927aeaf and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 93.3% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.4% (0.0% change).

View more on Code Climate.

[Mab879]

LGTM.

Thanks.

[Mab879]

Waving the Automatus tests for this PR as they are not applicable for this change.