fix: run web/worker as uid 1002 to match Syncthing

Shared /data dirs created as root blocked Syncthing pulls into incoming/.

Co-authored-by: Cursor <cursoragent@cursor.com>

compose.yml

@@ -12,6 +12,8 @@ services:
   worker:
     build: .
     restart: unless-stopped
+    # Same UID as Syncthing (PUID=1002) so shared /data stays writable.
+    user: "1002:1002"
     command: ["python3", "-m", "app.worker"]
     environment:
       DATA_DIR: /data
@@ -41,6 +43,7 @@ services:
   web:
     build: .
     restart: unless-stopped
+    user: "1002:1002"
     command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
     depends_on:
       - worker