inject proxy policies on nmdata path

shared/management/networkmap/nmdata/peer.go

@@ -36,6 +36,7 @@ type Peer struct {
 // ProxyMeta is the slim twin of peer.ProxyMeta.
 type ProxyMeta struct {
 	Embedded bool
+	Cluster  string
 }
 
 // PeerSystemMeta is the slim twin of peer.PeerSystemMeta.

shared/management/networkmap/nmdata/service.go

@@ -0,0 +1,25 @@
+package nmdata
+
+// Service is the slim twin of the reverse-proxy service.Service. It carries
+// only the state proxy-policy injection reads: the persisted reverse-proxy
+// services and the in-memory ones synthesised from agent-network state, which
+// are never written to the database.
+type Service struct {
+	ID           string
+	Enabled      bool
+	Private      bool
+	Mode         string
+	ProxyCluster string
+	AccessGroups []string
+	Targets      []*ServiceTarget
+}
+
+// ServiceTarget is the slim twin of service.Target.
+type ServiceTarget struct {
+	Enabled    bool
+	Path       string
+	Port       uint16
+	Protocol   string
+	TargetID   string
+	TargetType string
+}