fix: Add serverside encryption in bucketdeployment

Might solve issue:
- custom resource lambda (code)[https://github.com/aws/aws-cdk/blob/v1-main/packages/%40aws-cdk/aws-s3-deployment/lib/bucket-deployment.ts]
  has AccessDenied errors when calling PutObject on the static resources
  bucket.

src/CloudfrontStack.ts

@@ -31,6 +31,7 @@ import { IHostedZone } from 'aws-cdk-lib/aws-route53';
 import { RemoteParameters } from 'cdk-remote-stack';
 import { Construct } from 'constructs';
 import { Statics } from './statics';
+import { ServerSideEncryption } from 'aws-cdk-lib/aws-s3-deployment';
 
 export class CloudfrontStack extends Stack {
   private zone?: IHostedZone;
@@ -295,6 +296,7 @@ export class CloudfrontStack extends Stack {
       destinationBucket: bucket,
       distribution: distribution,
       distributionPaths: ['/static/*'],
+      serverSideEncryption: aws_s3_deployment.ServerSideEncryption.AES_256
     });
   }
 }