This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

Summary by cubic

Populate framework-scoped control links during org onboarding and backfill missing records, ensuring controls are correctly tied to policies, tasks, and evidence form types per framework instance. This fixes cross-framework leakage and keeps relationships accurate for reporting and evidence.

• Bug Fixes

  • During organization initialization, create FrameworkControlPolicyLink, FrameworkControlTaskLink, and FrameworkControlDocumentTypeLink entries scoped by frameworkInstanceId.
  • Scope control relations by frameworkId in load-framework-sources, include documentTypes, and handle controls appearing in multiple frameworks.
  • Keep legacy junction inserts for backward compatibility.
  • Added tests covering link creation, document types, and multi-framework scenarios.

• Migration

  • Backfill framework-scoped links from _ControlToPolicy, _ControlToTask, and ControlDocumentType using RequirementMap to determine frameworkInstanceId. Idempotent with conflict handling.

^{Written for commit 7cbbaa0. Summary will update on new commits.}