Moving Common Controls 11.2 to Policy Group 10

[mdueltgen]

🗣 Description

Common Controls Policy 11.2 will be moved into Policy Group 10 since 11.2 does not related to Google Marketplace, but rather API access.

💭 Motivation and context

Closes #318

🧪 Testing

✅ Pre-approval checklist

• This PR has an informative and human-readable title.
• Changes are limited to a single goal - eschew scope creep!
• If applicable, All future TODOs are captured in issues, which are referenced in the PR description.
• The relevant issues PR resolves are linked preferably via closing keywords.
• All relevant type-of-change labels have been added.
• I have read and agree to the CONTRIBUTING.md document.
• These code changes follow cisagov code standards.
• All relevant repo and/or project documentation has been updated to reflect the changes in this PR.
• Tests have been added and/or modified to cover the changes in this PR.
• All new and existing tests pass.

✅ Pre-merge Checklist

• This PR has been smoke tested to ensure main is in a functional state when this PR is merged.
• Squash all commits into one PR level commit using the Squash and merge button.

✅ Post-merge Checklist

• Delete the branch to clean up.
• Close issues resolved by this PR if the closing keywords did not activate.

[adhilto]

Overall looks good, just one small change, don't forget to move the "Control access to less secure apps" resource from 11 to 10

[adhilto]

Looks good.

I just pushed the needed code changes to this branch. @mdueltgen if you need to make more updates to this PR, I recommend pulling first so you have the changes locally. @buidav please review my code changes as well when you look at Max's changes.