Add ability to assign cert without domain

[zchase]

Fixes: https://github.com/pulumi/pulumi-aws-static-website/issues/19

Adds a block to assign a certificate ARN if it is available.