fix: web dist mount readable under Podman/SELinux

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.yml

@@ -101,7 +101,8 @@ services:
     ports:
       - "${AIJZ_WEB_PUBLISH:-127.0.0.1:5173}:80"
     volumes:
-      - ./web/dist:/usr/share/nginx/html:ro
-      - ./web/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      # :Z 供 Podman/SELinux 可读；纯 Docker 也兼容
+      - ./web/dist:/usr/share/nginx/html:ro,Z
+      - ./web/nginx.conf:/etc/nginx/conf.d/default.conf:ro,Z
     environment:
       TZ: Asia/Shanghai