Schedule auto-publish guard.

Shipped: If a manager forgets to publish a Sunday-night build, T-2h before the week starts the system surfaces a warning, then auto-publishes if untouched. auto_published_at stamped on every shift in the batch for audit.