Bug: we moved to CloudFront Origin Access control already but SAM does not support that yet

The main branch of this repo moved to use `AWS::CloudFront::OriginAccessControl` instead of the now-legacy `AWS::CloudFront::CloudFrontOriginAccessIdentity` in #298

However we now run into the fact that AWS::CloudFront::OriginAccessControl is not on the [List of Supported AWS Resources](https://docs.aws.amazon.com/serverlessrepo/latest/devguide/list-supported-resources.html) for the Serverless Repository.

This blocks us from publishing a new version to the SAR:

```
+ sam publish --template packaged.yaml
Publish Failed
Error: The template contains unsupported resource types. [AWS::CloudFront::OriginAccessControl]
Please follow the instructions in https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-template-publishing-applications.html
```

Have asked the AWS SAM team to support `AWS::CloudFront::OriginAccessControl`: https://github.com/aws/serverless-application-model/issues/3681

Start by reproducing the failure with `sam publish --template packaged.yaml` and review the linked AWS SAM issue #3681 about `AWS::CloudFront::OriginAccessControl` support. Done means the Serverless Repository accepts the template and a new version can be published.

Written by the indexing model from the issue text.