feat(controller): expose app url

While users should not have access to view a cluster's private
information like the cluster's auth key or the list of machines,
we need the cluster domain in order to expose the app url to the
user.