fix: DockerSecretsResolver - don't normalize absolute paths like /var/www/html/...

docker/php/docker-entrypoint.sh

@@ -40,6 +40,19 @@ chown -R appuser:appuser /var/www/html/cache 2>/dev/null || true
 chmod -R 775 /var/www/html/var 2>/dev/null || true
 chmod -R 775 /var/www/html/cache 2>/dev/null || true
 
+# Add appuser to docker group if docker socket exists (for Docker CLI access)
+if [ -S /var/run/docker.sock ]; then
+    DOCKER_GID=$(stat -c '%g' /var/run/docker.sock 2>/dev/null || echo "")
+    if [ -n "$DOCKER_GID" ] && [ "$DOCKER_GID" != "0" ]; then
+        # Create docker group with correct GID if it doesn't exist
+        if ! getent group docker >/dev/null 2>&1; then
+            groupadd -g "$DOCKER_GID" docker 2>/dev/null || true
+        fi
+        # Add appuser to docker group
+        usermod -aG docker appuser 2>/dev/null || true
+    fi
+fi
+
 # For PHP-FPM, run as root and let it manage user switching internally
 # PHP-FPM will drop privileges to the user specified in pool configuration
 # For other commands (console.php, etc.), switch to appuser