fix: create /workspaces dir, clone repo before running agent

Made-with: Cursor

Dockerfile

@@ -16,8 +16,11 @@ RUN npm ci --omit=dev
 # Copy compiled output (build before docker build, or use multi-stage)
 COPY dist/ ./dist/
 
-# Non-root user for security
-RUN useradd -r -s /bin/false agent
+# Create workspace dir and non-root user
+RUN useradd -r -m -s /bin/bash agent && \
+    mkdir -p /workspaces && \
+    chown -R agent:agent /workspaces /app
+
 USER agent
 
 EXPOSE 3333