There are different ways but the best is repoinit script under config.publish. It is surprising that non of the Adobe docs or guides mention this. set ACL for anonymous allow jcr:read on /var/sitemapsend
I think your issue is the cron expression. You are using cron format but needs to be quartz format.Another issue I came across is that anonymous user needs read access to var/sitemaps or you get 404.