ship-it api should be available as read-only publicly

[lundjordan]

alternatively, we should expose more release info such as graphids within product-details.

Not being behind auth and vpn helps releaseduty quickly get release info, as well as our enables measure-ci to get more data.

[rail]

I wonder if we should create a separate app for this or wrap the existing app to expose only the read-only (GET) end points. Also, should we use the same DB or a copy of the production one..

[garbas]

maybe we could just export those api endpoints. as we do for product details