Controls as Code: Continuous Controls Monitoring (CCM) with Graph-Powered Queries