feat(cloudfront): add Managed-HostHeaderOnly origin request policy (#38236)

### Issue # (if applicable)

Closes #38234.

### Reason for this change

CloudFront introduces a managed origin request policy `Managed-HostHeaderOnly`.
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html#managed-origin-request-policy-host-header-only

This policy includes only the Host header from the origin request. It doesn't include any query strings or cookies.

### Description of changes

- Added a managed origin request policy `OriginRequestPolicy.HOST_HEADER_ONLY`.

### Describe any new or updated permissions being added

N/A

### Description of how you validated changes

- Added a unit test to validate the policy id is correct.
- Updated an integ test to validate managed policies are deployed successfully.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: Tietew