Multiple formats used in NIST 800-53 control ID references

#### Share the context

Analysis of NIST rev5 control ID references in OpenEmbedded expanded profile revealed some discrepancies when trying to map references to the OSCAL profiles from NIST.

#### Description of problem:

Using the following to define 800-53 ID formats:

* caps with parens and no dots: `AC-11(1)`
* lowercase with dots and no parens: `ac-2.12`
* current rev5 IDs *do not* use roman numerals anywhere

#### Proposed change:

1. remove spaces in ids?
2. document? rev4/rev5 expected ID format(s)

#### References:

* https://github.com/usnistgov/oscal-content/tree/main/nist.gov/SP800-53/rev5
* https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
* https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final