Disable Helm-managed Ingress (chart doesn't support tailscale.com/*
annotations) and create a separate ingress-tailscale.yaml with
proxy-group annotation, matching the pattern used by all other services.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Remove explicit host: field from Immich Ingress — same ProxyGroup FQDN
mismatch as Prometheus and Loki. Add Immich and Navidrome to
services-check HTTP endpoints.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>