feat(iam): introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634)

IAM is stable in CDK, so we should not introduce breaking changes. This PR introduces a new version of OIDC provider without introducing breaking changes.

Older `iam.OpenIdConnectProvider`, which uses custom resources with lambda, is marked as deprecated. 

The newly introduced `OidcProviderNative` uses the native CloudFormation resource `AWS::IAM::OIDCProvider`

## ThumbprintList
`ThumbprintList` must not be empty when using `AWS::IAM::OIDCProvider`
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html
https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html

Closes #21197

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: WarFox