fix(catalog-to-csv): write one statement per CSV row

[michaeldavie-amzn]

Types of changes

• [ ] Hot fix (emergency fix and release)
• [x] Bug fix (non-breaking change which fixes an issue)
• [ ] New feature (non-breaking change which adds functionality)
• [ ] Documentation (change which affects the documentation site)
• [ ] Breaking change (fix or feature that would cause existing functionality to change)
• [ ] Release (develop -> main)

Quality assurance (all should be covered).

• [x] My code follows the code style of this project.
• [x] Documentation for my change is up to date?
• [ ] My PR meets testing requirements.
• [ ] All new and existing tests passed.
• [x] All commits are signed-off.

Summary

Modifies the statement level output of the oscal-catalog-to-csv task to output one row for each statement, to an arbitrary depth of sub-statements.

Key links:

• Sonar coverage

Before you merge

• Ensure it is a 'squash commit' if not a release.
• Ensure CI is currently passing
• Check sonar. If you are working for a fork a maintainer will reach out, if required.