Add new Ingress and tenant gateway service

[Flo4604]

We need a regional ingress layer that

• [ ] terminates TLS
• [ ] redirects to another region ingress incase there are no deployments in this region based on a proximity map
• [ ] sends the request to the correct environment gateway
• [ ] accepts lets-encrypt challenge requests and sends them to the control plane

A new environment scoped gateway layer

• [ ] gets http request
• [ ] deals with CH logging
• [ ] API Key Auth
• [ ] openapi validation
• [ ] sends req to the actual instance

[linear[bot]]

ENG-2199