fix deployment folder permisions

deploy_zero_downtime.sh

@@ -1,5 +1,6 @@
 #!/bin/bash
 # deploy-zero-downtime.sh
+cd /home/exedev/candle_annotator
 
 echo "🔄 Pulling latest code..."
 git pull

services/ml/.env.example

@@ -0,0 +1,3 @@
+DATABASE_URL=postgresql://pg_user:pg_password@localhost:5432/candle_annotator
+# openssl rand -hex 32 add to main .env too
+API_KEY=ML_API_KEY

services/ml/Dockerfile

@@ -29,8 +29,9 @@ COPY . .
 EXPOSE 8001
 
 # Create non-root user and set ownership
-RUN useradd -r -s /bin/false appuser
-RUN chown -R appuser:appuser /app
+RUN useradd -r -s /bin/false appuser && \
+    mkdir -p /app/data/raw /app/data/processed && \
+    chown -R appuser:appuser /app
 
 # Switch to non-root user
 USER appuser