fix: chown hf_cache to appuser so refs/main is writable at runtime

fix: add execute bit on /root so appuser can traverse into app dir

fix: chown app dir to appuser so uv can write venv

fix: grant read access to /root for uid 1000

fix: use uv run python for model pre-download

feat: initial