How I host this blog on a private S3 bucket with CloudFront, OAC, and zero stored credentials.