Windmill MCP サーバーを SSE 化してサーバーデプロイに対応

- windmill_mcp.py: MCP_TRANSPORT 環境変数で stdio/sse を切り替え可能に
- mcp/Dockerfile: Python 3.12-slim ベースのコンテナイメージを追加
- docker-compose.yml: windmill_mcp サービスを追加（Traefik 経由で windmill-mcp.keinafarm.net に公開）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -164,6 +164,37 @@ services:
         - "traefik.http.routers.windmill-debug.tls=true"
         - "traefik.http.services.windmill-debug.loadbalancer.server.port=3003"
 
+  windmill_mcp:
+    build:
+      context: ./mcp
+      dockerfile: Dockerfile
+    container_name: windmill_mcp
+    restart: unless-stopped
+    expose:
+      - 8001
+    environment:
+      - WINDMILL_TOKEN=${WINDMILL_TOKEN}
+      - WINDMILL_URL=https://windmill.keinafarm.net
+      - WINDMILL_WORKSPACE=admins
+      - MCP_TRANSPORT=sse
+      - MCP_HOST=0.0.0.0
+      - MCP_PORT=8001
+    labels:
+      - "traefik.enable=true"
+      # HTTPS ルーター
+      - "traefik.http.routers.windmill-mcp.rule=Host(`windmill-mcp.keinafarm.net`)"
+      - "traefik.http.routers.windmill-mcp.entrypoints=websecure"
+      - "traefik.http.routers.windmill-mcp.tls=true"
+      - "traefik.http.routers.windmill-mcp.tls.certresolver=letsencrypt"
+      - "traefik.http.services.windmill-mcp.loadbalancer.server.port=8001"
+      # HTTP → HTTPS リダイレクト
+      - "traefik.http.routers.windmill-mcp-http.rule=Host(`windmill-mcp.keinafarm.net`)"
+      - "traefik.http.routers.windmill-mcp-http.entrypoints=web"
+      - "traefik.http.routers.windmill-mcp-http.middlewares=windmill-https-redirect"
+    networks:
+      - traefik-net
+    logging: *default-logging
+
 volumes:
   db_data: null
   worker_dependency_cache: null