Make AWS NATGateway optional for most services

[lionello]

Now that public + ingress services use security groups to ensure that only the load balancer can access them, we really should make all services public by default, since this would allow us to do away with expensive NATGateways for most samples, saving $10s/mo.

This means that when no explicit network is mentioned in the compose file, we consider the services "public".