nex-speech: Dateirechte explizit (Clone auf ops ist 0600, Piper läuft als nobody)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

deploy/compose/nex-speech/piper/Dockerfile

@@ -4,9 +4,9 @@ FROM python:3.12-slim-bookworm@sha256:34386ef0cb081344d7ec1c103ba398e6e9f64e9ab3
 RUN apt-get update \
  && apt-get install -y --no-install-recommends ffmpeg \
  && rm -rf /var/lib/apt/lists/*
-COPY requirements.txt /app/requirements.txt
+COPY --chmod=0644 requirements.txt /app/requirements.txt
 RUN pip install --no-cache-dir --disable-pip-version-check -r /app/requirements.txt
-COPY app.py /app/app.py
+COPY --chmod=0644 app.py /app/app.py
 ENV PYTHONUNBUFFERED=1 PYTHONDONTWRITEBYTECODE=1
 USER nobody
 WORKDIR /app