add MMDL task management service deployment

- Add MMDL (Manage My Damn Life) task and calendar management service
- Configure NextAuth with Authentik OIDC integration
- Use MySQL 8.0 with proper authentication plugin
- Include Glance dashboard integration
- Add to main docker deployment pipeline

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

roles/docker/templates/mmdl-compose.yml.j2

@@ -0,0 +1,45 @@
+services:
+  mmdl:
+    image: intriin/mmdl:latest
+    container_name: mmdl
+    restart: unless-stopped
+    depends_on:
+      - mmdl_db
+    env_file:
+      - .env.local
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+      - "auth.thesatelliteoflove.com:172.20.0.5"
+    labels:
+      glance.name: MMDL
+      glance.icon: si:task
+      glance.url: https://tasks.thesatelliteoflove.com/
+      glance.description: Task and calendar management
+      glance.id: mmdl
+
+  mmdl_db:
+    image: mysql:8.0
+    container_name: mmdl_db
+    restart: unless-stopped
+    command: --default-authentication-plugin=mysql_native_password
+    environment:
+      MYSQL_DATABASE: mmdl
+      MYSQL_USER: mmdl
+      MYSQL_PASSWORD: "{{ vault_mmdl_mysql_password }}"
+      MYSQL_ROOT_PASSWORD: "{{ vault_mmdl_mysql_root_password }}"
+      MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
+      MYSQL_ROOT_HOST: "%"
+    volumes:
+      - mmdl_db:/var/lib/mysql
+    labels:
+      glance.parent: mmdl
+      glance.name: DB
+
+volumes:
+  mmdl_db:
+    driver: local
+
+networks:
+  default:
+    external: true
+    name: lava