add possibility to view non public manifests and images

not for permanent access (this shall require publication) but for preview. time bound, like 2h temporary proxies