Define cleanup authorization and targets

internal/config/validate.go

@@ -85,6 +85,9 @@ func validatePipeline(cfg *PipelineConfig) error {
 	if err := validatePublish(cfg.Publish, cfg.Scriptorium, cfg.Notarius); err != nil {
 		return err
 	}
+	if err := validateCleanupPublishPolicy(cfg); err != nil {
+		return err
+	}
 	if err := validateWhisperX(cfg.WhisperX); err != nil {
 		return err
 	}