Three operational fixes for the distributable image:

run_oci.sh: default the container to the invoking user (uid:gid, SUDO_UID-aware)
instead of the image's root default, with a new --root opt-out. The image has no
USER directive and supervisord sets no user=, so a run without --user created
root-owned dirs (logs, coderai-tmp, hf cache) in the bind-mounted /cache; a later
--user run then couldn't write them ("cannot write /cache/logs ... logging to
stdout only"). Running as the user by default makes a fresh install safe
regardless of run order. --root restores the old behaviour (and throwaway config
copy) for shared root-managed data dirs.

nginx.conf: error_log crit (was info) + access_log off. nginx's [notice]
startup/worker lines and per-request access logs were piped to the container
console by supervisord and buried coderai's own output on attach / docker logs.
Real failures (crit/alert/emerg) still surface.

install.sh: print an extensive post-install guide (quick start, --local + --map,
where data lives, the run-as-you default, file logging, docker logs/stop, --help).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RdMufYvtTbtGDWsiZVoXce