fix: run container as root, matching the rest of the fleet

Non-root USER made bind-mount ownership mismatches fatal, since an
unprivileged process can't write into a directory it doesn't own.
Root bypasses that check entirely (DAC_OVERRIDE), which is why this
class of bug doesn't show up for other apps on the same host — they
run as root by default too. Drops the now-unneeded mkdir+chown.

Author: abdusco

Dockerfile

@@ -6,11 +6,8 @@ COPY . .
 RUN CGO_ENABLED=0 go build -o /out/readone .
 
 FROM alpine:3.20
-RUN adduser -D -u 10001 readone
 WORKDIR /app
 COPY --from=build /out/readone ./readone
-RUN mkdir -p /app/data && chown -R readone:readone /app/data
-USER readone
 ENV PORT=8080
 ENV DB_PATH=/app/data/data.db
 VOLUME ["/app/data"]