Allowing Organizational Config Rules to apply and exclude certain OUs

### Name of the resource

AWS::Config::OrganizationConfigRule

### Resource name

_No response_

### Description

This resource should have an additional enhancement by allowing you to apply this config rule to specific organizational units and allowing you to exclude specific organizational units. Currently this resource only supports excluding individual accounts.

### Other Details

_No response_

Start by reviewing the AWS::Config::OrganizationConfigRule resource and its current account-exclusion behavior. Done would mean the resource can apply rules to selected organizational units and exclude selected organizational units, but the issue names no files, tests, or implementation entry point.

Written by the indexing model from the issue text.