feat: publish CodexPi contest snapshot

deploy/systemd/codexpi-docker-access.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Repair CodexPi access to the Docker socket
+Documentation=file:///home/config/CodexPi/docs/installation.md
+After=docker.service
+ConditionPathIsSocket=/var/run/docker.sock
+
+[Service]
+Type=oneshot
+User=__CODEXPI_UID__
+Group=__CODEXPI_GID__
+SupplementaryGroups=__DOCKER_GROUP__
+WorkingDirectory=/home/config/CodexPi
+ExecStart=/home/config/CodexPi/scripts/ensure-docker-access.sh
+NoNewPrivileges=true
+PrivateTmp=true
+UMask=0077
+TimeoutStartSec=180