Add self-maintaining Athena platform context MCP

platform/mcp/compose.yaml

@@ -137,6 +137,35 @@ services:
       - /config:rw,noexec,nosuid,nodev,size=4m,mode=0700
     networks: [tools, egress]
 
+  mcp-platform-context:
+    <<: *tool-common
+    build:
+      context: .
+      dockerfile: Dockerfile.platform-context
+    image: mike-ai/mcp-platform-context:1.0.0
+    container_name: mike-ai-mcp-platform-context
+    environment:
+      ATHENA_REPO_ROOT: /knowledge/repo
+      ATHENA_DOCS_ROOT: /workspace/docs
+      ATHENA_RUNTIME_FILE: /runtime/runtime.json
+      ATHENA_CONTEXT_STATE: /state
+      # Writes remain confined to docs/*.md and require a prepared proposal
+      # plus its exact confirmation string. The MCP cannot change code,
+      # containers, networking, secrets, Git or recovery bundles.
+      ATHENA_DOC_WRITE_MODE: enabled
+    volumes:
+      - ${PLATFORM_STACK_DIR:-/opt/mike-ai/stack}:/knowledge/repo:ro
+      - ${PLATFORM_DOCS_DIR:-/opt/mike-ai/stack/docs}:/workspace/docs:rw
+      - ${PLATFORM_CONTEXT_RUNTIME_DIR:-/var/lib/mike-ai-platform-context}:/runtime:ro
+      - ${PLATFORM_CONTEXT_STATE_DIR:-/data/mike-ai-platform-context}:/state:rw
+    networks: [tools]
+    healthcheck:
+      test: ["CMD", "python", "-c", "import socket; s=socket.create_connection(('127.0.0.1',8000),2); s.close()"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 10s
+
   mcp-github:
     <<: *tool-common
     build: