Bug: we moved to CloudFront Origin Access control already but SAM does not support that yet

[ottokruse]

The main branch of this repo moved to use AWS::CloudFront::OriginAccessControl instead of the now-legacy AWS::CloudFront::CloudFrontOriginAccessIdentity in #298

However we now run into the fact that AWS::CloudFront::OriginAccessControl is not on the List of Supported AWS Resources for the Serverless Repository.

This blocks us from publishing a new version to the SAR:

+ sam publish --template packaged.yaml
Publish Failed
Error: The template contains unsupported resource types. [AWS::CloudFront::OriginAccessControl]
Please follow the instructions in https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-template-publishing-applications.html

Have asked the AWS SAM team to support AWS::CloudFront::OriginAccessControl: aws/serverless-application-model#3681