fix(api): secure proxy config, clone volumes, and rollback tags (#11003)

app/Models/Application.php

@@ -74,6 +74,7 @@ use Symfony\Component\Yaml\Yaml;
         'limits_cpu_shares' => ['type' => 'integer', 'description' => 'CPU shares.'],
         'status' => ['type' => 'string', 'description' => 'Application status.'],
         'preview_url_template' => ['type' => 'string',  'description' => 'Preview URL template.'],
+        'max_restart_count' => ['type' => 'integer', 'description' => 'Maximum container restart count before stopping.'],
         'destination_type' => ['type' => 'string', 'description' => 'Destination type.'],
         'destination_id' => ['type' => 'integer', 'description' => 'Destination identifier.'],
         'source_id' => ['type' => 'integer', 'nullable' => true, 'description' => 'Source identifier.'],

app/Models/SharedEnvironmentVariable.php

@@ -39,6 +39,14 @@ class SharedEnvironmentVariable extends Model
         'value' => 'encrypted',
     ];
 
+    /**
+     * Scope shared environment variables to a team (API token team_id).
+     */
+    public static function ownedByCurrentTeamAPI(int $teamId)
+    {
+        return static::where('team_id', $teamId);
+    }
+
     protected function key(): Attribute
     {
         return Attribute::make(