754cd72df5
PVC was written as root before runAsUser: 1000 was added; SQLite refused writes with SQLITE_READONLY. initContainer runs as root to chown the volume, then the app runs as UID 1000 as required.