[Question] How can we configure it to isolate requests from accessing these internal interfaces of shenyu-bootstrap?

### Question

As the entry point for traffic following load balancing, the Shenyu gateway directs all subdomains directly to shenyu-bootstrap. However, some API interfaces in shenyu-bootstrap are unauthenticated and can be accessed directly via domain + URI, such as /actuator, /actuator/env, etc. How can we configure it to isolate requests from accessing these internal interfaces of shenyu-bootstrap?

Start by reviewing the shenyu-bootstrap entry point and the exposed /actuator and /actuator/env paths, then trace how direct domain routing and access controls are configured. Confirm the supported configuration for isolating these internal interfaces and verify that unauthenticated direct requests are blocked without affecting gateway traffic.

Written by the indexing model from the issue text.