fix : mount /var/www as /mnt/apps, fix docker socket GID for www-data

- Mount host /var/www into /mnt/apps to avoid conflict with container /var/www/html
- Use GID 987 (host docker group) instead of 999 for socket access
- Add group_add in docker-compose for container-level GID

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

infra/prod/docker-compose.yml

@@ -1,15 +1,17 @@
 services:
-  app:
-    image: gitea.malio.fr/malio-dev/central:${CENTRAL_IMAGE_TAG:-latest}
-    container_name: central-app
-    env_file: .env
-    ports:
-      - "8084:80"
-    volumes:
-      - ./config/jwt:/var/www/html/config/jwt:ro
-      - ./uploads:/var/www/html/var/uploads
-      - /var/run/docker.sock:/var/run/docker.sock
-      - /var/www:/mnt/apps
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    restart: unless-stopped
+    app:
+        image: gitea.malio.fr/malio-dev/central:${CENTRAL_IMAGE_TAG:-latest}
+        container_name: central-app
+        env_file: .env
+        ports:
+            - "8084:80"
+        group_add:
+            - "987"
+        volumes:
+            - ./config/jwt:/var/www/html/config/jwt:ro
+            - ./uploads:/var/www/html/var/uploads
+            - /var/run/docker.sock:/var/run/docker.sock
+            - /var/www:/mnt/apps
+        extra_hosts:
+            - "host.docker.internal:host-gateway"
+        restart: unless-stopped