Shipped docker-compose cannot start: audit.db resolves under /etc/cmcp (AUDIT_STORE_UNAVAILABLE)

[saintmalik]

cmcp-gateway version

git SHA 6fe452024911 (current main)

Python version

Container image runtime (Dockerfile USER 10001:10001); not a host-Python install path.

TEE provider

none (local docker compose)

Reproduction steps

1. At HEAD, use the shipped docker-compose.yml with examples/minimal/cmcp-config.yaml (audit_db_path: ./audit.db).
2. Note compose sets working_dir: /etc/cmcp, so the relative path resolves to /etc/cmcp/audit.db.
3. Note the runtime stage chowns only /var/lib/cmcp and drops privileges to UID/GID 10001.
4. Run docker compose up --build.

Expected behavior

Gateway starts; audit store opens under a directory writable by the runtime user and backed by a durable volume.

Actual behavior

Startup aborts with AUDIT_STORE_UNAVAILABLE because /etc/cmcp/audit.db is not writable by 10001. Compose also declares no volume for the audit store, so even a fixed writable path would be discarded on container recreate.

Relevant logs or TRACE Claim output

AUDIT_STORE_UNAVAILABLE Cannot open audit store at './audit.db': unable to open database file (path effectively /etc/cmcp/audit.db under working_dir /etc/cmcp; writable data dir is /var/lib/cmcp)

Conformance test ID (if applicable)

AUDIT (compose packaging / AUDIT store durability)

Happy to open a PR; this is separate from #676 (stores not closed on shutdown).