Add CMMI maturity level to compliance controls

Adds an optional CMMI 0-5 maturity level field to Control to support
ISO 27001 clause 9.1 effectiveness measurement and HITRUST CSF maturity
requirements. The field is nullable, framework-agnostic, and exposed
across all four API surfaces (GraphQL, MCP, CLI, n8n) plus the
generated SoA document.

Signed-off-by: Alejandro Juan <alejandrojuan@alejandrojuan.com>

apps/console/src/components/form/ControlMaturityLevelOptions.tsx

@@ -0,0 +1,37 @@
+// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import {
+  controlMaturityLevels,
+  getControlMaturityLevelLabel,
+} from "@probo/helpers";
+import { useTranslate } from "@probo/i18n";
+import { Option } from "@probo/ui";
+
+export const MATURITY_LEVEL_UNSET = "__unset__" as const;
+
+export function ControlMaturityLevelOptions() {
+  const { __ } = useTranslate();
+
+  return (
+    <>
+      <Option value={MATURITY_LEVEL_UNSET}>{__("Not set")}</Option>
+      {controlMaturityLevels.map(level => (
+        <Option key={level} value={level}>
+          {getControlMaturityLevelLabel(__, level)}
+        </Option>
+      ))}
+    </>
+  );
+}