MediaMtx mpv streaming support and QoL functions

Makefile

@@ -1,4 +1,4 @@
-.PHONY: init plan apply destroy clean kubeconfig talosconfig argocd-password bootstrap decrypt post-apply build-mcp-auth-proxy
+.PHONY: init plan apply destroy clean kubeconfig talosconfig argocd-password bootstrap decrypt post-apply build-mcp-auth-proxy stream-url
 
 SECRET ?= dumpnet
 FORGEJO_REGISTRY ?= forge.keane.sh
@@ -79,6 +79,16 @@ argocd-password:
 	  --query SecretString --output text | python3 -c \
 	  "import sys,json; print(json.load(sys.stdin)['cluster']['argocd_admin_password'])"
 
+# Build the current RTMP publish URL from the dumpnet secret (mediamtx.*)
+# — handy for testing without going through the IRC bot, since the
+# zoitestream API is cluster-internal only.
+stream-url:
+	@aws secretsmanager get-secret-value --secret-id $(SECRET) \
+	  --query SecretString --output text | python3 -c \
+	  "import sys, json; \
+	  d = json.load(sys.stdin)['mediamtx']; \
+	  print(f\"rtmp://stream.dumpnet.chat:1935/live?user=streamer&pass={d['publish_password']}\")"
+
 # Decrypt sensitive files to /tmp for one-off talosctl use
 # Files are never decrypted in the repo directory
 decrypt: