Add ports mapping (api:3000, ml:8000, node_exporter:9100) bound to TS_IP env var (default 0.0.0.0). Inject TS_IP via deploy GH Action. Why: containers had no host port mapping → Prometheus on telemetry VPS (imrnes) could not scrape metrics via Tailscale IP. Co-Authored-By: Claude <noreply@anthropic.com>