[FEATURE REQUEST] Document and test support for @wheel, @runner and @jobs syntax in publisher_acl

Opened as a task for the Security WG

Is your feature request related to a problem? Please describe.

As part of the work to implement SEP19 we need to be able to run the salt-master process as a non-root user that is also a member of a shared group that will be used to allow users to run the salt cli tools.

This will require the use of the Publisher ACL system to control access to salt functionality for non-root users using the salt cli commands.

It's not clear from the Publisher ACL docs if the ACL syntax supports the @wheel, @runner and @jobs syntax that the eauth ACLs do. The docs just say that "This configuration is much like the external_auth configuration"

Describe the solution you'd like

Review code and test to see if the Publisher ACL support the syntax.

Update the docs

Additional context

SEP19

Start with the Publisher ACL documentation and the linked eauth ACL documentation, then inspect the Publisher ACL implementation and its existing tests for support of @wheel, @runner, and @jobs. Done means the supported syntax is verified by tests and the Publisher ACL documentation clearly describes the result.