fix: devcontainer build and setup on fresh clones

backend/entrypoint.sh

@@ -16,6 +16,12 @@ fi
 
 /opt/venv/bin/alembic upgrade head
 
+# Migrate ran as root: hand the (possibly just created) DB files back to
+# vscode so editor-run commands stay writable.
+if id vscode >/dev/null 2>&1; then
+  chown -R vscode:vscode data 2>/dev/null || true
+fi
+
 if [ "${APP_ENV:-prod}" = "dev" ]; then
   exec /opt/venv/bin/uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
 else