fix: preserve apt temporary directory permissions

[fqjony]

Summary

• Preserve /tmp as the standard root-owned sticky directory so apt can verify repository signatures.
• Avoid recursively changing permissions on application and log files.
• Upgrade the worker base image from 0.45.0 to 0.47.0.

Validation

• Rebuilt worker-php locally and verified a signed apt refresh and expected runtime directory modes.
• Rebuilt worker-site against the local parent; the full image build succeeded with current Ubuntu dependencies.

[Copilot]

Pull request overview

Updates the image build’s apt workflow to avoid signature verification issues caused by non-standard /tmp ownership/permissions and to prevent successful builds from proceeding with stale apt metadata.

Changes:

• Make apt-get update fail the build on any index refresh error (APT::Update::Error-Mode=any).
• Stop recreating and chown/chmoding /tmp, preserving the base image’s root-owned sticky directory permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.