Embargo functionality

* Allows publications to be set under an embargo using the `underEmbargo` and `embargoDate` fields
 * When a new publication is created `underEmbargo` defaults to `true` and `embargoDate` to `null`
* Moved the publication validation functionality from the `oae-tickets` to the `oae-publication` module
* Allows publication funders and authors to be updated through the `updatePublication` endpoint
* Augments a publication with user permissions when a publication is fetched e.g. `isAdmin`, `isAuthor`, etc

A UI counterpart PR is in the making.
Seems like a win to have replaced the augment boilerplate w/ this.

One thing is that applyNextAugmentation doesn't return (or not return) consistently. 1 of the 3 cases returns, the others don't.