Add su-exec to runner stage, run entrypoint as root to chown /data,
then drop to nextjs user for migrations and app start. Fixes permission
denied errors when Docker volume is mounted as root.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>