fix(s3-deployment): preserve custom log groups during deletion

[Hashim1999164]

Issue # (if applicable)

Closes #35632.

Reason for this change

When a BucketDeployment uses a custom log group, make the singleton handler depend on that group. CloudFormation will then delete the handler before the log group, preventing late handler logs from recreating a group that the stack already deleted.

Description of change

• Add a CloudFormation dependency from the singleton Lambda handler to the custom log group
• Extend the existing log-group unit test to assert that dependency
• Refresh the integ.bucket-deployment-loggroup snapshot so the template records the deletion order

Description of how you validated changes

• npx jest aws-s3-deployment/test/bucket-deployment.test.ts --runInBand --coverage=false (71 tests passed)
• yarn integ --dry-run --update-on-failed test/aws-s3-deployment/test/integ.bucket-deployment-loggroup.js (passed)

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

(This review is outdated)

[Hashim1999164]

Updated the PR description to put the issue reference in the template's Issue section.

This change already includes an integration snapshot update under packages/@aws-cdk-testing/framework-integ/test/aws-s3-deployment/test/integ.bucket-deployment-loggroup.js.snapshot/, plus unit coverage in bucket-deployment.test.ts. Please re-run the PR linter if it still wants another integ source edit; happy to adjust.

[Hashim1999164]

Exemption Request: this fix already updates the integration snapshot at packages/@aws-cdk-testing/framework-integ/test/aws-s3-deployment/test/integ.bucket-deployment-loggroup.js.snapshot/ and adds unit coverage in bucket-deployment.test.ts. The integ test source itself did not need a logic change; only the resulting snapshot changed to record the new Lambda→log-group dependency / deletion order.

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.