Support object lock configurations

[nate-selzer]

Describe the Feature

Support adding a lock configuration to your bucket
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#object_lock_configuration

Expected Behavior

At minimum - allow user to pass in lock configurations as a variable, and create the s3 bucket with that lock configuration.

Use Case

Trying to store deployment artifacts in s3. Would like these to be immutable for some time similar to how ECR repositories can have immutable tags.

Describe Ideal Solution

At minimum - allow user to pass in lock configurations as a variable, and create the s3 bucket with that lock configuration. Additionally, there could be a boolean option to assign the bucket user s3:ByPassGovernanceRetention permissions, but this isn't necessary for my use case.

[korenyoni]

Main use case resolved by #84, which closes this issue.