executors: Executors should not be exposed publicly

Created by: efritz

Currently executor instances are exposed to the public internet and they expose a debug server with vars and gc endpoints that may contain information unsuitable for public consumption. (It's also able to trigger a GC run arbitrarily via these endpoints, so we should at a minimum allowlist the ingress traffic).