- Add ./logs:/app/logs volume mount to docker-compose.yaml for log access
- Create entrypoint.sh script that fixes directory ownership at startup
- Install gosu in Dockerfile for secure privilege dropping
- Use ENTRYPOINT to run permission fix as root, then drop to krawl user
This ensures bind-mounted directories have correct permissions even when
Docker creates them as root on the host.
