feat: add dynamic s3Locations statements to allow oidc roles access to specified s3 paths

[tom-webber]

Pull Request Objective

This piece of work is being tracked in #4622.

#4622 involves switching over workflow processes to run on GitHub Actions runners assuming roles by OIDC (roles specified in the files edited in this PR) rather than running on self-hosted runners (see this PR for an example). In order to do this, the new OIDC roles need permissions to be able to carry out all of the duties of the existing roles.

A change is required to allow the analytics-platform-helm-charts role to deposit artefacts (which fails without this change) in s3. This is separate from the requirement for state bucket access, so a key:value pair was added to the oidc-roles json that creates a dynamic statement in the github_oidc_role for each role.

Checklist

• I have reviewed the style guide
  and ensured that my code complies with it
• All checks have passed (or override label applied, if I've
  used the override-static-analysis label, I've explained why)
• I have self-reviewed my code
• I have reviewed the checks and can attest they're as expected

Additional Comments

[github-actions]

Terraform Component 🧱: aws-analytical-platform-oidc

Checkov 🛂: success

Trivy 🛂: success

Static Analysis Override Label 🏷️: false

Pusher: @tom-webber, Action: pull_request, Working Directory: terraform/aws/analytical-platform/oidc, Workflow: Terraform, Marker: aws-analytical-platform-oidc_static_analysis

[github-actions]

Terraform Component 🧱: aws-analytical-platform-oidc

Terraform Initialization ⚙️: success

Terraform Validation 🤖: success

Terraform Plan 🛠️: success

Pusher: @tom-webber, Action: pull_request, Working Directory: terraform/aws/analytical-platform/oidc, Workflow: Terraform, Marker: aws-analytical-platform-oidc_plan

[julialawrence]

LGTM