Fixes

• Docker — published images could not start (#24): entrypoint.sh was tracked in git without the execute bit and both Dockerfiles copied it verbatim, so images shipped /app/entrypoint.sh as non-executable and the exec-form ENTRYPOINT failed with permission denied. The script is now tracked as executable and both Dockerfiles use COPY --chmod=755, so containers from GHCR / Docker Hub start normally with the stock docker-compose.yml.
• Dashboard — Network throughput chart losing its right margin (#15): a bare 1fr grid track mins at auto, so the fixed-width SVG that ECharts renders could widen its own column; the chart then re-measured against the inflated width and never shrank back, and the card's overflow clipping left the plot hugging the card's right edge. Chart grid columns are now floored at 0 (minmax(0, 1fr)), including the narrow-viewport breakpoints.