fix(dankserver): run arr stack and qb as container-root (PUID=0)

Under rootless podman, LSIO's PUID=1000 maps to host uid 101000 — a phantom
user owning nothing: Sonarr's own validator rejected /tv because the process
could not write it. Container-root under a single-user userns maps to the host
user (dank), which owns every /mnt/entropy media dir and /opt config dir.
Identity is now mapping-independent instead of depending on subuid offsets.
calibre-web untouched (working; churn avoided).

dankserver/compose.yaml

@@ -150,8 +150,8 @@ services:
     container_name: prowlarr
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes:
@@ -167,8 +167,8 @@ services:
     container_name: qbittorrent
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes:
@@ -184,8 +184,8 @@ services:
     container_name: radarr
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes:
@@ -201,8 +201,8 @@ services:
     container_name: sonarr
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes:
@@ -218,8 +218,8 @@ services:
     container_name: lidarr
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes:
@@ -235,8 +235,8 @@ services:
     container_name: readarr
     restart: unless-stopped
     environment:
-      - PUID=1000
-      - PGID=1000
+      - PUID=0
+      - PGID=0
       - TZ=America/Los_Angeles
       - UMASK_SET=022
     volumes: