Support for Control Depth: Unbounded

[rgauss]

Currently the getControlOrSubControl in OSCALControlResolver only supports a single level depth of controls when searching for controls but that depth is unbounded in the OSCAL specification, which we should support.

We may consider this a lower priority until we see catalogs in use with controls of greater depth.

See the comment on #67 for reference.