Fix file permissions: set umask 0022 so created files are world-readable

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

_docker/app/Dockerfile

@@ -19,6 +19,7 @@ RUN apt-get update && apt-get install -y \
       rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
 COPY _docker/app/php.ini /usr/local/etc/php/conf.d/php.ini
+COPY _docker/app/www.conf /usr/local/etc/php-fpm.d/www.conf
 
 COPY app            /var/www/app
 COPY bootstrap      /var/www/bootstrap

_docker/app/entrypoint.sh

@@ -1,5 +1,7 @@
 #!/bin/sh
 
+umask 0022
+
 cd /var/www
 
 # Ensure storage symlink exists (recreate if missing or broken)

_docker/app/www.conf

@@ -0,0 +1,10 @@
+[www]
+user = www-data
+group = www-data
+listen = 9000
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
+umask = 0022