Add isolated Navidrome MCP service

platform/mcp/compose.yaml

@@ -111,6 +111,29 @@ services:
       - ${ARR_RADARR_PATCH:-./patches/mcp_radarr.py}:/usr/local/lib/python3.13/site-packages/arr_mcp/mcp/mcp_radarr.py:ro
     networks: [tools, egress]
 
+  mcp-navidrome:
+    <<: *tool-common
+    # Version and amd64 manifest are pinned. The image contains no mpv, so it
+    # cannot play audio on the headless AI host and does not expose playback
+    # controls. It talks to Navidrome only through its authenticated API.
+    image: ghcr.io/blakeem/navidrome-mcp:2.2.0@sha256:047f911a5a8f7cc8f185bb4d6e7ca6c435542edefff4694a00c2f718ab0ee7f5
+    container_name: mike-ai-mcp-navidrome
+    profiles: [navidrome]
+    env_file:
+      - ${NAVIDROME_MCP_ENV_FILE:-/etc/mike-ai/navidrome-mcp.env}
+    environment:
+      MCP_TRANSPORT: http
+      MCP_HTTP_EXPOSE: "true"
+      MCP_HTTP_PORT: "3000"
+      # The endpoint is not published on the host. Host filtering still makes
+      # accidental access from any other Docker name fail closed.
+      MCP_HTTP_ALLOWED_HOSTS: "mike-ai-mcp-navidrome:3000,mike-ai-mcp-navidrome"
+      WEBUI_ENABLED: "false"
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,nodev,size=64m
+      - /config:rw,noexec,nosuid,nodev,size=4m,mode=0700
+    networks: [tools, egress]
+
   mcp-unraid-official:
     <<: *tool-common
     image: debian:13-slim