The way I would approach is one bridge. No vlan 4 interface, you don’t want the connection to the “routing engine” for the TV vlan.
Something like (not tested) (this is “internal wiring” only, firewall, interface lists, etc. not covered here). You will need to add ip addresses to the LAN_vlan213 (and WAN_vlan666 will get its ip via DHCP from the ISP)
vlan 4 IPTV (connected tagged to ether1 and ether2, no connection to bridge (CPU/routing_engine) - note: there is no vlan interace associated with vlan 4, it is only configured for the bridge ports ether1 and ether2
vlan 666 internet (connected Untagged to ether1, tagged to bridge (CPU/routing_engine) There is also a vlan interface WAN_vlan666 associated with this vlan, it’s the “connection” to the routing engine.
vlan 213 LAN (connected Untagged to ether2, tagged to bridge (CPU/routing_engine) There is also a vlan interface LAN_vlan213 associated with this vlan, it’s the “connection” to the routing engine.
/interface bridge
add name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=LAN_vlan213 vlan-id=213
add interface=bridge name=WAN_vlan666 vlan-id=666
/interface bridge port
add bridge=bridge interface=ether1 pvid=666
add bridge=bridge interface=ether2 pvid=213
/interface bridge vlan
add bridge=bridge tagged=ether1,ether2 vlan-ids=4
add bridge=bridge tagged=bridge untagged=ether2 vlan-ids=213
add bridge=bridge tagged=bridge untagged=ether1 vlan-ids=666