Introduce BucketAccessControlTemplate

This would make the Bucket Acceess Control API constistent with other GCS access controls.
I'd choose one or the other.. Either a factory method namespaced inside Builder. or here. having both is confusing.