Add `RiskAssessment.template_id` column

Also add `RiskAssessmentControlMapping` model, table, and endpoints