Cleaning up a very full object store

A crowded backup store needed more than one giant delete command and a hopeful shrug. I wrote a cautious batch cleanup that pages through objects, reports progress and verifies the result at the end, making a long destructive job observable and recoverable.