Add optional MDBList movie ratings

server/README.md

@@ -91,6 +91,7 @@ headers attached.
 | GET | `/v1/search/history` | Current user's distinct searches from the last 30 days |
 | POST | `/v1/search/history` | Record a successful search for the current user |
 | GET | `/v1/items/{id}` | Full metadata for one item |
+| GET | `/v1/items/{id}/ratings` | Optional server-filtered MDBList movie ratings; empty on disable/unavailable/failure |
 | GET | `/v1/items/{id}/episodes` | Complete episode browser for a series, grouped into seasons by the TV |
 | GET | `/v1/items/{id}/playback` | Resolves series → episode, returns a direct-play URL |
 | GET | `/v1/items/{id}/next` | Episode following this one, or 404 when nothing does |
@@ -302,6 +303,7 @@ bypass the gate after the browser session expires. Scripts may continue to use
 | POST | `/admin/api/maintenance` | `{"enabled":true,"message":"…"}` |
 | POST | `/admin/api/update-policy` | `{"enabled":true,"latestVersion":"0.1.54","downloadUrl":"…","required":false}` |
 | POST | `/admin/api/features` | Publish feature overrides, enter safe mode, reset defaults, or roll back one revision |
+| POST | `/admin/api/mdblist-settings` | Enable MDBList, replace/clear its API key, and select visible rating sources |
 | GET | `/admin/api/analytics?days=7` | Row engagement |
 
 The **Features** admin page is the recovery surface for optional TV behaviour. Flags are
@@ -316,6 +318,17 @@ so a server never advertises an optional contract to a client that did not decla
 The first migrated controls are the Sonarr preroll, automatic My Shows, and its automatic
 follow notification; all three can be stopped without publishing an APK.
 
+### Optional MDBList movie ratings
+
+The **Movie ratings** admin page enables MDBList, stores its API key only in the gateway's
+`app_settings` table, and selects which supported sources may be returned. It is disabled
+by default. Movie detail pages request `/v1/items/{id}/ratings` independently of essential
+Emby metadata; missing provider IDs, MDBList errors, invalid or unavailable values all
+produce an empty successful response. Successful MDBList responses are cached in Redis for
+24 hours before the configured source filter is applied, so changing visible sources does
+not consume more MDBList quota. The API key is never returned by either the TV or admin
+status APIs.
+
 ## Library import
 
 `internal/library` copies Emby's catalogue into Postgres so the gateway answers from its