fix(api): hide application compose PR fields

Add compose PR fields to the Application hidden attributes and allow database list queries to eager load nested server settings when sensitive access is permitted.

tests/Unit/Models/SensitiveFieldsHiddenTest.php

@@ -48,7 +48,9 @@ describe('Sensitive model fields are hidden by default', function () {
             'manual_webhook_secret_gitea',
             'dockerfile',
             'docker_compose',
+            'docker_compose_pr',
             'docker_compose_raw',
+            'docker_compose_pr_raw',
             'custom_labels',
         );
     });