Retention Policies

Per-data-category retention windows. Periodic attestations sign off that deletion ran on schedule, with S3-bucket probes as evidence.