feat: Shared code volume for nginx and app containers

- Add app-code volume to both nginx and app containers
- App container clones code once into shared volume
- Nginx container uses shared volume (read-only) and waits for code
- Update entrypoint.sh to handle storage-preserving git clone
- Fix nginx configuration to use app:9000 for PHP-FPM

This eliminates duplicate code cloning and ensures both containers
always use the same code version from the shared volume.

docker/entrypoint.sh

@@ -49,15 +49,26 @@ if [ -n "$GIT_REPOSITORY_URL" ]; then
         echo "📥 Cloning repository from $GIT_REPOSITORY_URL (branch: $GIT_BRANCH)..."
         
         # Remove existing files if they exist (from image build)
+        # But preserve storage directory if it's a volume mount
         if [ "$(ls -A $GIT_TARGET_DIR 2>/dev/null)" ]; then
-            echo "🗑️  Cleaning existing files..."
-            rm -rf "$GIT_TARGET_DIR"/* "$GIT_TARGET_DIR"/.* 2>/dev/null || true
+            echo "🗑️  Cleaning existing files (preserving storage)..."
+            find "$GIT_TARGET_DIR" -mindepth 1 -maxdepth 1 ! -name "storage" -exec rm -rf {} \; 2>/dev/null || true
         fi
         
-        # Clone repository
-        git clone --branch "$GIT_BRANCH" --depth 1 "$GIT_URL_WITH_AUTH" "$GIT_TARGET_DIR" || {
+        # Clone into temporary directory first, then move contents (preserving storage)
+        TEMP_CLONE="${GIT_TARGET_DIR}.tmp"
+        rm -rf "$TEMP_CLONE" 2>/dev/null || true
+        if git clone --branch "$GIT_BRANCH" --depth 1 "$GIT_URL_WITH_AUTH" "$TEMP_CLONE"; then
+            # Remove only files/dirs that are not storage (which might be a volume mount)
+            find "$GIT_TARGET_DIR" -mindepth 1 -maxdepth 1 ! -name "storage" -exec rm -rf {} \; 2>/dev/null || true
+            # Move contents from temp directory to target (preserving storage)
+            find "$TEMP_CLONE" -mindepth 1 -maxdepth 1 ! -name "." ! -name ".." -exec mv {} "$GIT_TARGET_DIR/" \; 2>/dev/null || true
+            rm -rf "$TEMP_CLONE" 2>/dev/null || true
+            echo "✅ Repository cloned successfully"
+        else
             echo "❌ Git clone failed. Falling back to image contents."
-        }
+            rm -rf "$TEMP_CLONE" 2>/dev/null || true
+        fi
     else
         echo "🔄 Pulling latest changes from $GIT_BRANCH..."
         cd "$GIT_TARGET_DIR"