Add service credential visibility.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/migrations/002_application_docked_lifecycle.sql

@@ -0,0 +1,6 @@
+-- Add DOCKED lifecycle status and dock metadata (run if TypeORM sync is disabled)
+ALTER TYPE applications_lifecyclestatus_enum ADD VALUE IF NOT EXISTS 'docked';
+
+ALTER TABLE applications
+  ADD COLUMN IF NOT EXISTS "dockedAt" TIMESTAMPTZ,
+  ADD COLUMN IF NOT EXISTS "dockSnapshotId" VARCHAR;