How should a data retention schedule be enforced in Salesforce using automation (flows, Apex batch, Privacy Center retention policies) while preserving records that are subject to a legal hold?