clarify the webapp visibility
currently a webapp is either public or private
- if an app is public, then all its versions are publicly available
- the sandbox is only visible for the app owner
We have a published
field in WebappVersion (but it is not yet used by the rails frontend). When a version is not published, then it should be visible only by the owners (this would allow the owner to save a draft of their sandbox). Note: the controller sets published=false
for recovery versions (created when the sandbox has an unexpected state).