Document required permission to read bucket ownership controls

[dkocher]

For S3, we require the permission set for the user to read the bucket ownership controls. Add a warning the permissions3:GetBucketOwnershipControls ^1 is required.

Possibly compile a list of recommend permissions granted to the IAM user as we need others as well. Such as documented in

• https://docs.cyberduck.io/protocols/s3/#versions
• https://docs.cyberduck.io/protocols/s3/#permissions