MA's YouTube Music provider needs a bgutil PO token server; MA installs
the matching yt-dlp plugin unpinned from PyPI (2.0.2 today), so the
server tracks 2.x via image automation. The MA docs' "1.2.1" predates
the 2.x plugin line.
Reachable only from the MA pod; egress limited to DNS and world:443.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>