fix: resolve staging blockers B1-B5, S6, X5 (quality review v1)

2026-07-05 22:55:29 +02:00
parent 64b840c94c
commit 8aa2e6792b
6 changed files with 39 additions and 9 deletions
@@ -13,7 +13,8 @@ RUN pip install --no-cache-dir --upgrade pip && \
 COPY . .

 RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
-USER appuser
+# B4: run as root for staging so /data volume is writable without chown entrypoint.
+# (Bind-mounted /data from host typically has host UID, not 1000.)

 EXPOSE 8000