HEL-271: 反代 tmpfs 属主与运行 uid 对齐（修复非 root nginx 启动）

Co-authored-by: multica-agent <github@multica.ai>

deploy/compose.yaml

@@ -69,8 +69,8 @@ services:
     restart: unless-stopped
     read_only: true
     tmpfs:
-      - /var/cache/nginx:size=16m
+      - /var/cache/nginx:size=16m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
-      - /var/run:size=1m
+      - /var/run:size=1m,uid=${PROXY_UID:-101},gid=${PROXY_GID:-101},mode=700
     security_opt:
       - no-new-privileges:true
     cap_drop: