Support custom KMS keys in S3CopyObjectOperator

[dominikhei]

closes: #55708

This PR introduces 2 new parameters to the S3CopyObjectOperator. With these one can specify a non-default KMS key when copying objects between buckets.

• kms_key_id: The ARN, ID or alias of a KMS key
• kms_encryption_type: Whether it is standard KMS or double-shielded KMS

The parameters are passed to the Hooks copy_object() method using kwargs, which passes them to the boto3 method.
I did this to not introduce new parameters to the method and keep changes minimal, however I also see a point that this is not as clean as passing them to the method via parameters and if deemed preferential will change that.

---

Was generative AI tooling used to co-author this PR?

• [] Yes

---

[o-nikolas]

Looks pretty good other than the two comments already called out.

You also might want to update the docs to describe how/when to use these, might be helpful for some folks

[shahar1]

@dominikhei If there aren't critical changes to make, please let the CI run E2E without merging from main - so I could include it in the release I cut in the next hour or so. Thank you!