Run ship-daemon as appuser, mount ~/.claude.json, add docker group

Three fixes the first daemon-on-ubu boot surfaced:

1. claude refuses --dangerously-skip-permissions when running as root.
   Switched the daemon to user 1000:1000 (= ubu's marko) and added
   the docker group (gid 998 on ubu) so it can still talk to the
   mounted host socket.

2. ~/.claude/ has the session creds but the config file lives one
   level up at ~/.claude.json — added that bind mount too. SSH and
   workspace paths moved from /root to /home/appuser to match.

3. Bake `git config --system safe.directory '*'` into the image as a
   defence-in-depth: with uid 1000 on both sides this normally isn't
   needed, but a wildcard safe.directory keeps the daemon working if
   the repos are ever re-cloned by a different uid.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>