feat: configure externally managed machine endpoints

[alongubkin]

Background

Adopted Machines deployments can already have stable customer-owned DNS names and certificates. Treating those deployments as if Alien owns their public hostname produces a second, incorrect URL and can make the control plane manage infrastructure it does not own.

Changes

• add StackSettings.publicEndpoints using the existing nested resource/endpoint URL map
• preserve every configured URL exactly; do not derive hostnames or synthesize wildcard URLs
• document the field as the ownership boundary for adopted Machines endpoints
• regenerate the public core schema and Manager OpenAPI/Rust SDK so the map survives deploy CLI → Manager conversion
• initialize exhaustive StackSettings constructors so all Rust test targets continue to compile

Platform PR #431 consumes this field only for Machines deployments, validates complete endpoint ownership against the enabled stack before DNS writes, and excludes those resources from managed DNS/certificate planning.

Linear: ALIEN-553

Validation

• cargo test -p alien-core machine_public_endpoints_round_trip_without_rewriting_urls --features openapi
• cargo test -p alien-operator --no-run
• cargo test -p alien-deploy-cli sdk_stack_settings_preserves_public_endpoints --lib
• pnpm run generate:manager-rust-sdk
• pnpm -C packages/core generate
• pnpm -C packages/core build

[greptile-apps]

Greptile Summary

The PR adds externally managed endpoint URLs to StackSettings and propagates the nested URL map through the manager API contract without rewriting values.

• Adds the optional publicEndpoints shared setting and a serialization round-trip test.
• Regenerates manager OpenAPI artifacts so generated SDK conversion preserves the setting.
• Updates exhaustive operator test fixtures for the expanded shared struct.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
crates/alien-core/src/stack_settings.rs	Adds optional externally managed endpoint URLs with camelCase serialization and verifies exact URL round-tripping.
crates/alien-deploy-cli/src/commands/up.rs	Adds coverage proving the generated manager SDK conversion retains nested public endpoint URLs.
crates/alien-operator/src/config.rs	Updates exhaustive test-only StackSettings literals for the new optional field.
client-sdks/manager/openapi.json	Exposes publicEndpoints as an optional nested string map in the manager API schema.
client-sdks/manager/rust/openapi-3.0.json	Updates the Rust SDK generator input with the compatible nullable nested-map property.

Sequence Diagram

sequenceDiagram
  participant Config as Deployment config
  participant Core as alien_core::StackSettings
  participant SDK as Manager SDK StackSettings
  participant Manager as alien-manager
  Config->>Core: Deserialize publicEndpoints
  Core->>SDK: JSON conversion preserving nested URLs
  SDK->>Manager: Send StackSettings

Loading

_{Reviews (3): Last reviewed commit: "fix: preserve adopted public endpoints t..." | Re-trigger Greptile}