Navidrome will only open your library in read-only

Are you sure that's not just the default in the example docker-compose.yml? If there isn't some additional handling, you can just remove the ":ro" from:

volumes:
      - "/path/to/your/music/folder:/music:ro"