fix: add execute permission for start.sh to prevent runtime crash

fix: use start.sh as ENTRYPOINT to configure env

fix: use curl with retry for opencode download

fix: robust Dockerfile with retries

fix: normalize COPY instruction for stable builds

Deploy via automated script [skip ci]