Configurable public or private instance visibility

Server deployments can now run as either public or private instances via the new HIVE_VISIBILITY configuration. Private instances require every visitor to sign in before they can reach public content like domains, projects, specs, and drops, while public instances let anonymous browsing continue unchanged.