New Audit Event: Compliance framework label on project changed

Release notes

Problem to solve

Users may change the compliance framework label on a project. This change could be potentially controversial or unintended, so organizations wish to be able to have a record of this happening. Today, there is no audit event created for any changes to this label.

Proposal

Create a new audit event in the audit log when a project's compliance framework label changes.

Implementation Plan

• Add Auditable concern to ComplianceManagement::ComplianceFramework::ProjectSetting.
  As the join table between Project and ComplianceManagement::Framework, the creation or destruction of a row represents when a framework is added or removed from a project.
• Add specs to assert that the audit event is created when:
  • A project has a new framework added to it.
  • A project has a framework removed.