Add time-limited external access for optional services and database.

Users can open temporary NodePort access with auto-revoke via Bull jobs and a dashboard UI to manage active grants.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/src/common/enums.ts

@@ -51,6 +51,20 @@ export enum OptionalService {
   ELASTICSEARCH = 'elasticsearch',
 }
 
+/** Targets for time-limited external access via temporary NodePort */
+export enum ServiceAccessTarget {
+  DATABASE = 'database',
+  REDIS = 'redis',
+  RABBITMQ_AMQP = 'rabbitmq_amqp',
+  RABBITMQ_MANAGEMENT = 'rabbitmq_management',
+}
+
+export enum ServiceAccessGrantStatus {
+  ACTIVE = 'active',
+  EXPIRED = 'expired',
+  REVOKED = 'revoked',
+}
+
 export enum DeploymentStatus {
   PENDING = 'pending',
   BUILDING = 'building',