fix: lfx boot, deploy key, and entrypoint perms for compose/devcontainer

docker-compose.yml

@@ -121,6 +121,12 @@ services:
       # Runtime secrets come from `.env` when present (see setup.sh).
       - path: .env
         required: false
+    environment:
+      # lfx resolves its serve key via get_api_key(), which prefers
+      # LANGFLOW_API_KEY over LFX_API_KEY. Our backend talks to LFX with
+      # LFX_API_KEY, so blank the former here (empty counts as unset) —
+      # otherwise every flow deploy 401s and /flows stays empty.
+      LANGFLOW_API_KEY: ""
     volumes:
       - lfx-data:/flows
     ports: