Fix Immich Ingress host matching, add missing service checks

Remove explicit host: field from Immich Ingress — same ProxyGroup FQDN
mismatch as Prometheus and Loki. Add Immich and Navidrome to
services-check HTTP endpoints.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

argocd/manifests/immich/ingress-tailscale.yaml

@@ -25,8 +25,7 @@ metadata:
 spec:
   ingressClassName: tailscale
   rules:
-    - host: photos
-      http:
+    - http:
         paths:
           - path: /
             pathType: Prefix

mise-tasks/services-check

@@ -77,6 +77,8 @@ check_http "Miniflux" "https://feed.ops.eblu.me/healthcheck"
 check_http "TeslaMate" "https://tesla.ops.eblu.me/"
 check_http "Devpi" "https://pypi.ops.eblu.me/+api"
 check_http "Transmission" "https://torrent.ops.eblu.me/"
+check_http "Immich" "https://photos.ops.eblu.me/"
+check_http "Navidrome" "https://dj.ops.eblu.me/"
 
 echo ""
 echo "Public services (via Fly.io):"