Fix runner: add daemon entrypoint and docker socket permissions

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -38,6 +38,8 @@ services:
     image: code.forgejo.org/forgejo/runner:6.3.1
     container_name: xetup-runner
     restart: unless-stopped
+    entrypoint: ["/bin/sh", "-c", "forgejo-runner daemon"]
+    user: "0:996"    # root:docker - needed for /var/run/docker.sock access
     depends_on:
       - forgejo
     environment: