add build env and path ingress controls

prisma/schema.prisma

@@ -170,6 +170,7 @@ model AppComponent {
   updatedAt   DateTime      @updatedAt @map("updated_at") @db.Timestamptz(3)
   app         App           @relation(fields: [appId], references: [id], onDelete: Cascade)
   buildJobs   BuildJob[]
+  buildVariables BuildEnvVariable[]
   runtimeVariables RuntimeEnvVariable[]
   ingressRules RuntimeIngressRule[]
 
@@ -177,6 +178,22 @@ model AppComponent {
   @@map("app_components")
 }
 
+model BuildEnvVariable {
+  id          String       @id @default(uuid()) @db.Uuid
+  componentId String       @map("component_id") @db.Uuid
+  key         String
+  value       String
+  isSecret    Boolean      @default(false) @map("is_secret")
+  createdAt   DateTime     @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt   DateTime     @updatedAt @map("updated_at") @db.Timestamptz(3)
+  component   AppComponent @relation(fields: [componentId], references: [id], onDelete: Cascade)
+
+  @@unique([componentId, key])
+  @@index([componentId])
+  @@index([componentId, isSecret])
+  @@map("build_env_variables")
+}
+
 model BuildJob {
   id          String       @id @default(uuid()) @db.Uuid
   componentId String       @map("component_id") @db.Uuid
@@ -319,6 +336,7 @@ model RuntimeIngressRule {
   host          String
   path          String            @default("/")
   servicePort   Int               @map("service_port")
+  stripPrefix   Boolean           @default(false) @map("strip_prefix")
   tlsEnabled    Boolean           @default(false) @map("tls_enabled")
   tlsSecretName String?           @map("tls_secret_name")
   createdAt     DateTime          @default(now()) @map("created_at") @db.Timestamptz(3)