Fix API non-root permission issues (#22)

fix: grant non-root user access to Prisma query engine in Docker

The Prisma query engine binary in site-packages was not accessible
to the non-root appuser, causing "Not connected to the query engine"
errors. Use chown with a glob pattern to transfer ownership of the
prisma package directory to appuser, avoiding hardcoded Python version
and world-readable permissions.

Co-authored-by: Claude <noreply@anthropic.com>

Author: platzhersh

api/Dockerfile

@@ -22,7 +22,9 @@ RUN prisma generate
 # Create non-root user for security
 RUN groupadd --gid 1000 appgroup && \
     useradd --uid 1000 --gid appgroup --shell /bin/bash --create-home appuser && \
-    chown -R appuser:appgroup /app
+    chown -R appuser:appgroup /app && \
+    # Grant non-root user ownership of Prisma query engine binary in site-packages
+    chown -R appuser:appgroup /usr/local/lib/python*/site-packages/prisma/
 
 USER appuser