Add bounded read-only Athena terminal MCP

platform/mcp/Dockerfile.athena-terminal

@@ -0,0 +1,20 @@
+FROM python:3.13-slim@sha256:ffb752e139c0a19692a43af8d8523b274222dd68eebad5d583b45c2201c6e30a
+
+ARG MCP_PROXY_VERSION=0.12.0
+ARG MCP_VERSION=1.29.0
+ARG PYYAML_VERSION=6.0.3
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends bash file ripgrep \
+    && rm -rf /var/lib/apt/lists/* \
+    && pip install --no-cache-dir \
+       "mcp==${MCP_VERSION}" "mcp-proxy==${MCP_PROXY_VERSION}" "PyYAML==${PYYAML_VERSION}" \
+    && useradd --system --uid 10002 --create-home --home-dir /app terminal
+
+COPY athena_terminal_mcp.py /app/athena_terminal_mcp.py
+RUN chown -R 10002:10002 /app
+
+USER 10002:10002
+WORKDIR /app
+EXPOSE 8000
+ENTRYPOINT ["mcp-proxy", "--host", "0.0.0.0", "--port", "8000", "--stateless", "--"]
+CMD ["python", "/app/athena_terminal_mcp.py"]