fix: SAM spec type is wrong for Serverless Function Policies

[rix0rrr]

The apparent contract we didn't implement correctly was that the fields named Inclusive*ItemTypes need to be respected, regardless of whether the top-level type includes List or not.

So force that behavior.

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected

└[~] service aws-sam
  └ resources
     ├[~] resource AWS::Serverless::Function
     │ ├ properties
     │ │  └ Policies: - string | Array<string | IAMPolicyDocument | SAMPolicyTemplate> | IAMPolicyDocument ⇐ string | IAMPolicyDocument (immutable)
     │ │              + string | IAMPolicyDocument | Array<string | IAMPolicyDocument | SAMPolicyTemplate> (immutable)
     │ └ types
     │    ├[~] type BucketSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type CollectionSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type DomainSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type EmptySAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type FunctionSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type IdentitySAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type KeySAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type LogGroupSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type ParameterNameSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type QueueSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type SAMPolicyTemplate
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type SecretArnSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type StateMachineSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type StreamSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type TableSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    ├[~] type TableStreamSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined
     │    └[~] type TopicSAMPT
     │      └  - mustRenderForBwCompat: true
     │         + mustRenderForBwCompat: undefined
     └[~] resource AWS::Serverless::StateMachine
       ├ properties
       │  └ Policies: - string | Array<string | IAMPolicyDocument | SAMPolicyTemplate> | IAMPolicyDocument ⇐ string | IAMPolicyDocument (immutable)
       │              + string | IAMPolicyDocument | Array<string | IAMPolicyDocument | SAMPolicyTemplate> (immutable)
       └ types
          ├[~] type FunctionSAMPT
          │ └  - mustRenderForBwCompat: true
          │    + mustRenderForBwCompat: undefined
          ├[~] type SAMPolicyTemplate
          │ └  - mustRenderForBwCompat: true
          │    + mustRenderForBwCompat: undefined
          └[~] type StateMachineSAMPT
            └  - mustRenderForBwCompat: true
               + mustRenderForBwCompat: undefined

[mrgrain]

@rix0rrr Thanks! Was this change expected?

     │    ├[~] type BucketSAMPT
     │    │ └  - mustRenderForBwCompat: true
     │    │    + mustRenderForBwCompat: undefined

[rix0rrr]

I guess so?

It must be because those types are now used.