Choose whether a record is public, restricted, or hidden

[jamiefolsom]

As a content manager, I want to mark a record as public, restricted, or unpublished, so that sensitive items stay out of the public site and search until they're ready.

Part of #638 (record-level governance).