Refacto load all functions

Unbounded LoadAll* loaders materialised an entire result set in one
query with no ceiling. A table that is small in development can grow
without bound in production, so these loaders were a latent memory
and query-time hazard.

Remove the LoadAll* methods from pkg/coredata and walk the cursor-
paginated LoadBy* siblings instead through a shared page.LoadAll
helper. The helper advances a MaxCursorSize forward cursor until the
result set is exhausted and concatenates the pages. It caps a single
call at MaxLoadAllPages (20) batches of 500 rows and errors past that
rather than materialising an unbounded set, so a runaway caller fails
loudly instead of exhausting memory.

Callers that genuinely need every row now express that explicitly,
and the coredata load-naming rule and docs are updated to discourage
new unbounded loaders.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>

pkg/coredata/applicability_statement.go

@@ -482,57 +482,6 @@ WHERE
 	return nil
 }
 
-func (sacs *ApplicabilityStatements) LoadAllByStatementOfApplicabilityID(
-	ctx context.Context,
-	conn pg.Querier,
-	scope Scoper,
-	statementOfApplicabilityID gid.GID,
-) error {
-	q := `
-SELECT
-    a.id,
-    a.statement_of_applicability_id,
-    a.control_id,
-    a.organization_id,
-    a.applicability,
-    a.justification,
-    a.created_at,
-    a.updated_at,
-    f.name || ' - ' || c.section_title AS section_title
-FROM
-    applicability_statements a
-INNER JOIN
-    controls c ON c.id = a.control_id
-INNER JOIN
-    frameworks f ON f.id = c.framework_id
-WHERE
-    a.%s
-    AND a.statement_of_applicability_id = @statement_of_applicability_id
-ORDER BY
-    section_title_sort_key(f.name || ' - ' || c.section_title) ASC;
-`
-	q = fmt.Sprintf(q, scope.SQLFragment())
-
-	args := pgx.StrictNamedArgs{
-		"statement_of_applicability_id": statementOfApplicabilityID,
-	}
-	maps.Copy(args, scope.SQLArguments())
-
-	rows, err := conn.Query(ctx, q, args)
-	if err != nil {
-		return fmt.Errorf("cannot query applicability_statements: %w", err)
-	}
-
-	controls, err := pgx.CollectRows(rows, pgx.RowToAddrOfStructByName[ApplicabilityStatement])
-	if err != nil {
-		return fmt.Errorf("cannot collect applicability_statements: %w", err)
-	}
-
-	*sacs = controls
-
-	return nil
-}
-
 func (sacs *ApplicabilityStatements) CountByStatementOfApplicabilityID(
 	ctx context.Context,
 	conn pg.Querier,