Expose Novelly API port + service-key auth for MCP access to QA deploy

MCP server is a stdio process run outside docker, pointed at the API
over HTTP via NOVELLY_API_URL. The api container previously had no
port mapping, so it was unreachable outside the compose network.

.github/workflows/ci.yml

@@ -60,6 +60,8 @@ jobs:
       REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
       WEB_PORT: ${{ vars.WEB_PORT }}
+      API_PORT: ${{ vars.API_PORT }}
+      MCP_API_KEY: ${{ secrets.MCP_API_KEY }}
     steps:
       # actions/checkout@v4 is a Node-based action; this runner has no node in PATH, so
       # checkout plain git instead of via marketplace action.

deploy/qa/docker-compose.qa.yml

@@ -17,10 +17,13 @@ services:
       Agent__Model: claude-sonnet-5
       Agent__Effort: high
       Imports__RootPath: /data/imports
+      Auth__ServiceApiKey: ${MCP_API_KEY:-}
     volumes:
       - /mnt/storage/apps/novelly/data:/data
     networks:
       - novelly
+    ports:
+      - "${API_PORT:-5080}:8080"
     healthcheck:
       test: ["CMD-SHELL", "curl -fsS http://localhost:8080/api/health || exit 1"]
       interval: 10s

scripts/ci/deploy.sh

@@ -13,6 +13,8 @@ registry_login
 export API_IMAGE WEB_IMAGE
 export ANTHROPIC_API_KEY="${ANTHROPIC_API_KEY:-}"
 export WEB_PORT="${WEB_PORT:-6173}"
+export API_PORT="${API_PORT:-5080}"
+export MCP_API_KEY="${MCP_API_KEY:-}"
 
 COMPOSE="docker compose -f deploy/qa/docker-compose.qa.yml"