publish: moved responsibility for check_can_publish to a-u

Source.check_can_publish moved to a-u.Source.can_create, to
consolidate knowledge about what silos can and cannot publish
in one canonical place.