Deploy SCPs to OUs

Not a lot of information here, so answering broadly. To create an SCP from your JSON policy - you can do this with the CLI or SDK by following he documentation here:

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_create.html

To attach that SCP to the root or an OU or OUs using the CLI or SDK follow this documentation:

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_attach.html

If you want to use CICD principals to do this - which I think you do - given you specifically mention version control - you can do this a number of ways - including using AWS code* services.