(s3-deployment): support expected-bucket-owner

### Describe the feature

Support the expected bucket owner feature as described here: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-owner-condition.html

### Use Case

This helps customers validate that the bucket they are writing to is owned by the account they expect.

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.189.0

### Environment details (OS name and version, etc.)

Ubuntu 24.04

Start by reading the linked AWS S3 bucket-owner condition documentation and locating the aws-cdk S3 deployment entry point that performs bucket writes. Determine the affected configuration and tests, then verify that deployments can validate the expected bucket owner without breaking existing behavior.

Written by the indexing model from the issue text.