feat: enable uniform bucket level access for source bucket

This silences a trivy error and, since access to the bucket is
transparent to users, is not a breaking change.