CORE-327 (New) Audit Requests are mapped to Controls instead of Objectives.

As a consequence of this, the mapping of Audits to different object types is done through and audit_objects table, and an object_type column on the Audit.  If we decide to make Audits against, e.g., ProgramControl join objects later (for control assessments), that will be a much easier change.