De-duplicate styles for lists

We had styles in _app_memorandum_of_understanding and _app_lists that
were very similar, this commit de-duplicates the code.

We use `govuk-spacing(4)` rather than 20px for the padding, as
govuk-spacing(4) the same dimension for desktop viewports but also
responsive for smaller viewports, this also matches what is in
[_lists.scss in govuk-frontend][1].

[1]: https://github.com/alphagov/govuk-frontend/blob/5e14495c40ec61112d069da3e61c168e1ce40012/packages/govuk-frontend/src/govuk/core/_lists.scss

Author: lfdebrux

app/frontend/entrypoints/application.scss

@@ -7,7 +7,6 @@ $govuk-new-typography-scale: true;
 @import "../styles/app_filter";
 @import "../styles/app_form_states";
 @import "../styles/app_lists";
-@import "../styles/app_memorandum_of_understanding";
 @import "../styles/app_preview_area";
 @import "../styles/app_select_options";
 @import "../styles/app_summary_card";

app/frontend/styles/_app_memorandum_of_understanding.scss

@@ -295,7 +295,7 @@
   <li>
     <p>Your organisation as a Data Controller is responsible for ensuring that:</p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>it is permitted by Law to transfer Personal Data to GDS as its data processor;</p>
       </li>
@@ -342,7 +342,7 @@
       organisation, include:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>a systematic description of the envisaged Processing operations and the purpose of the Processing;</p>
       </li>
@@ -363,7 +363,7 @@
   <li>
     <p>GDS shall, in relation to the GOV.UK Forms User Personal Data:</p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>
           process that Personal Data only in accordance with the Schedule of Processing, Personal Data and Data Subjects (Annex D) unless
@@ -378,7 +378,7 @@
           Protective Measures), having taken account of the:
         </p>
 
-        <ol class="govuk-list app-list--roman">
+        <ol class="govuk-list app-list--lower-roman">
           <li>
             <p>nature of the data to be protected;</p>
           </li>
@@ -398,7 +398,7 @@
   <li>
     <p>GDS shall ensure that:</p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>
           Processor Personnel do not Process Personal Data except in accordance with this MOU (and in particular the Schedule of Processing,
@@ -411,7 +411,7 @@
           Data and ensure that they:
         </p>
 
-        <ol class="govuk-list app-list--roman">
+        <ol class="govuk-list app-list--lower-roman">
           <li>
             <p>are aware of and comply with the GDS duties under this paragraph;</p>
           </li>
@@ -435,7 +435,7 @@
           United Kingdom unless either:
         </p>
 
-        <ol class="govuk-list app-list--roman">
+        <ol class="govuk-list app-list--lower-roman">
           <li>
             <p>the transfer is in accordance with Article 45 of the UK GDPR or section 17A of DPA 2018; or</p>
           </li>
@@ -477,7 +477,7 @@
           either:
         </p>
 
-        <ol class="govuk-list app-list--roman">
+        <ol class="govuk-list app-list--lower-roman">
           <li>
             <p>the transfer is in accordance with Article 45 of the EU GDPR; or</p>
           </li>
@@ -503,7 +503,7 @@
                   any Personal Data that is transferred; and
                 </p>
 
-                <ol class="govuk-list app-list--alpha">
+                <ol class="govuk-list app-list--lower-alpha">
                   <li>
                     <p>
                       GDS complies with any reasonable instructions notified to it in advance by your organisation with respect to the
@@ -530,7 +530,7 @@
       obligations under applicable Data Protection Legislation) if it:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>receives a Data Subject Request (or purported Data Subject Request);</p>
       </li>
@@ -567,7 +567,7 @@
       the timescales reasonably required by your organisation) including by promptly providing:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>your organisation with full details and copies of the complaint, communication or request;</p>
       </li>
@@ -611,7 +611,7 @@
       always that:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>
           your organisation gives GDS a minimum of 30 calendar days’ written notice of its intention to audit (other than in the event of a
@@ -666,7 +666,7 @@
       GDS must:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>have undertaken an information security assessment of the Sub-Processor to ensure compliance with all aspects of this MOU;</p>
       </li>
@@ -710,7 +710,7 @@
       particular GDS agrees that it shall:
     </p>
 
-    <ol class="govuk-list app-list--alpha">
+    <ol class="govuk-list app-list--lower-alpha">
       <li>
         <p>process the GOV.UK Forms User and Filler Personal Data only as set out in this MOU;</p>
       </li>