feat(2): Q3.5 immich enrollment (recipe_meta + ops + lifecycle overlays + health parity)

immich (object-storage/large-volume photo mgmt; D10 category): 3 services (app incl. ML + web, redis,
database/postgres), self-contained (no SSO dep — local admin; OIDC optional). recipe_meta (HTTP health,
DEPLOY_TIMEOUT=1500), ops.py postgres ci_marker (postgres/immich, backupbot-labelled), lifecycle
overlays, health_check parity. §4.3 upload-asset→list→thumbnail test next (after live-API discovery).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/immich/functional/test_health_check.py

@@ -0,0 +1,20 @@
+"""immich — parity port of recipe-maintainer's health_check.py (Phase 2 P2).
+
+SOURCE: references/recipe-maintainer/recipe-info/immich/tests/health_check.py
+
+The original asserted HTTP 200 from `https://immich.<DOMAIN_SUFFIX>`. The cc-ci port preserves the
+assertion shape — non-error HTTP from the served root — adapted to the ephemeral per-run domain."""
+
+from __future__ import annotations
+
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "..", "runner"))
+from harness import http as harness_http  # noqa: E402
+
+
+def test_immich_returns_200(live_app):
+    url = f"https://{live_app}/"
+    status, _ = harness_http.retry_http_get(url, expect_status=(200, 301, 302), max_wait=60, interval=3)
+    assert status in (200, 301, 302), f"immich at {url} returned HTTP {status} (expected 200/301/302)"