Add system-characteristics 'has-assurance-level' constraints

[Gabeblis]

Committer Notes

{Please provide a description of what this PR accomplishes. Be sure to reference any issues addressed. If the PR is a work-in-progress submitted for early review, please submit the PR as a draft PR using the "Draft pull request" dropdown.}

Description

Added system-characteristics 'has-assurance-level' constraints and tests for each of the constraints. These should be added as they are part of the effort write all of the constraints from the constraint tracker.

Changes

• Added constraints has-identity-assurance-level, has-authenticator-assurance-level, and has-federation-assurance-level to fedramp-external-constraints.xml.
• Added pass and fail yaml tests for all of the above constraints.
• Edited ssp-all-VALID.xml to ensure all constraints pass correctly.

All Submissions:

• Have you selected the correct base branch per Contributing guidance?
• Have you set "Allow edits and access to secrets by maintainers"?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Have you added an explanation of what your changes do and why you'd like us to include them?
  - [ ] If applicable, have all FedRAMP Documents Related to OSCAL Adoption affected by the changes in this issue have been updated.?
  - [ ] If applicable, does this PR reference the issue it addresses and explain how it addresses the issue?

By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.

[aj-stein-gsa]

@Gabeblis you cool with me committing those recs and merging in this PR after that or would you like to discuss?

[Gabeblis]

@Gabeblis you cool with me committing those recs and merging in this PR after that or would you like to discuss?

Can we briefly discuss?

[aj-stein-gsa]

@Gabeblis you cool with me committing those recs and merging in this PR after that or would you like to discuss?

Can we briefly discuss?

Thanks for discussing, sir! I appreciate the conversation. I will ref #675 because we need to look at examples like this review to discuss wording of certain types of messages, and we need consistent info before (not after) constraint writing about that.