fixed permissions issues with deploy watch target

Dockerfile

@@ -23,7 +23,7 @@ ENV HOSTNAME=0.0.0.0
 ENV PORT=3050
 
 RUN addgroup --system --gid 1001 app && \
-    adduser --system --uid 1001 app
+    adduser --system --uid 1001 -G app app
 
 COPY --from=build /app/public ./public
 COPY --from=build --chown=app:app /app/.next/standalone ./

docker-compose.yml

@@ -11,7 +11,7 @@ services:
       # Bearer token for POST /api/deploy. Set it in a .env file next to this
       # compose file (gitignored); the route returns 404 when it is unset.
       - DEPLOY_TRIGGER_SECRET=${DEPLOY_TRIGGER_SECRET:-}
-      - DEPLOY_TRIGGER_DIR=${DEPLOY_TRIGGER_DIR:-/deploy-trigger}
+      - DEPLOY_TRIGGER_DIR=/deploy-trigger
     volumes:
       # Shared with scripts/deploy-watch.sh on the host.
       - ./deploy-trigger:/deploy-trigger