Add controlled Athena platform operator

platform/mcp/install-tools.sh

@@ -34,6 +34,11 @@ systemctl daemon-reload
 systemctl enable --now mike-ai-platform-context-snapshot.timer
 systemctl start mike-ai-platform-context-snapshot.service
 
+# One user-facing Athena Operator MCP controls the complete local AI platform
+# through a root-side structured executor. It is intentionally not a general
+# shell and exposes no raw Docker socket or host paths to the MCP container.
+"$MCP_DIR/../operator/install-operator.sh"
+
 profiles=()
 if [[ -s /etc/mike-ai/homeassistant-admin-mcp.env ]]; then
   profiles+=(--profile homeassistant)