feat: Update AssessmentLog to include Evidence (ADR-0022)

[eddie-knight]

Description

Partially implements ADR-0022. The "address" field is not added in this PR, as I'd like to have some more discussion regarding that field's type.

Schema Changes

Schema Changes Made

• No schema changes
• Audit Log schema (auditlog.cue) changes
• Capability Catalog schema (capabilitycatalog.cue) changes
• Control Catalog schema (controlcatalog.cue) changes
• Enforcement Log schema (enforcementlog.cue) changes
• Evaluation Log schema (evaluationlog.cue) changes
• Guidance Catalog schema (guidancecatalog.cue) changes
• Mapping Document schema (mappingdocument.cue) changes
• Policy Document schema (policy.cue) changes
• Principle Catalog schema (principlecatalog.cue) changes
• Risk Catalog schema (riskcatalog.cue) changes
• Threat Catalog schema (threatcatalog.cue) changes
• Vector Catalog schema (vectorcatalog.cue) changes
• Other

Schema Change Details

Modifies #Evidence and makes it an optional field on #AssessmentLog

Testing

• Unit tests added/updated
• Manual testing performed
• Test data updated (if applicable)

Related Issues

Reviewer Hints

---

Self-review checklist

• This PR has content that was created with AI assistance.
  • I have read and followed the Generative AI Contribution Policy.
• I have the experience and knowledge necessary to answer maintainer questions about the content of this PR, without using AI.

[jpower432]

Looks good. Suggested id be required since we have a list of evidence and asked a question about address.

[hbraswelrh]

LGTM

[jpower432]

LGTM