Granular control for content publishing restrictions

Provide the ability to impose publishing limitations based on specific conditions, including:
- Restrict publishing for content under certain paths (supporting wildcards).
- Apply restrictions during defined time periods.
- Enforce rules for all users except those in designated groups.

These limitations should also apply to the bulk publishing tool to ensure consistent governance.

https://jira.corp.adobe.com/browse/MWPW-183905

No files, tests, or entry points are named. Start by locating the publishing flow and bulk publishing tool, then map where path wildcards, time periods, and group exceptions can be enforced consistently; done means each restriction works for both individual and bulk publishing.

Written by the indexing model from the issue text.