Add an import-profile entrypoint without delete

Buzz's read-only Mealie agent cannot import recipes, and the full server
exposes delete_recipe and the Home Assistant shopping-list write to any
client that runs it. Neither profile fits an on-demand import agent.

Add IMPORT_TOOL_NAMES — the read-only allowlist plus import_recipe_url,
import_recipe_text, import_recipe_image, patch_recipe, parse_ingredients
and set_cover_image — and expose it through main_import(). Adding a recipe
is recoverable from the Mealie UI; removing one is not, so delete_recipe
stays out of the profile even though it writes.

Verified over stdio: the entrypoint lists exactly those 15 tools.

Co-authored-by: fredamn76 <fredrik.fallman@gmail.com>
Signed-off-by: fredamn76 <fredrik.fallman@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

mealie_mcp/server.py

@@ -53,6 +53,17 @@ READ_ONLY_TOOL_NAMES = frozenset(
     }
 )
 
+IMPORT_TOOL_NAMES = READ_ONLY_TOOL_NAMES | frozenset(
+    {
+        "import_recipe_url",
+        "import_recipe_text",
+        "import_recipe_image",
+        "patch_recipe",
+        "parse_ingredients",
+        "set_cover_image",
+    }
+)
+
 
 class MealieAuthError(RuntimeError):
     """The Mealie token is missing, expired, or wrong (HTTP 401)."""
@@ -776,3 +787,13 @@ def main_read_only() -> None:
     """Run the same server without import, patch, delete, parse, image, or HA writes."""
     _configure_read_only(mcp)
     mcp.run()
+
+
+def main_import() -> None:
+    """Run the server with the import pipeline but without delete or HA writes.
+
+    Adding a recipe is recoverable through the Mealie UI; removing one is not,
+    so `delete_recipe` stays out even though this profile writes.
+    """
+    _configure_read_only(mcp, IMPORT_TOOL_NAMES)
+    mcp.run()