fix(docker): run real questions through trusted Pi gate

docker/core.Dockerfile

@@ -24,8 +24,8 @@ RUN apt-get update \
     && apt-get install --yes --no-install-recommends ca-certificates curl \
     && rm -rf /var/lib/apt/lists/* \
     && useradd --create-home --uid 10001 thoth \
-    && mkdir -p /app/backend /app/docker/smoke /data/settings \
-    && chown -R thoth:thoth /data
+    && mkdir -p /app/backend /app/docker/smoke /app/harness/config /data/settings /home/thoth/.pi/agent \
+    && chown -R thoth:thoth /app/harness /data /home/thoth/.pi
 
 COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
 COPY --from=node-runtime /opt/pi-runtime /opt/pi-runtime
@@ -36,11 +36,13 @@ RUN ln -s /opt/pi-runtime/node_modules/.bin/pi /usr/local/bin/pi \
 WORKDIR /app
 COPY harness/ /app/harness/
 COPY --from=gate-deps /src/harness/node_modules /app/harness/node_modules
+RUN chown -R thoth:thoth /app/harness
 COPY docker/python-runtime/requirements.lock /app/docker/python-runtime/requirements.lock
 RUN python -m venv /opt/venv \
     && /opt/venv/bin/pip install --no-cache-dir --require-hashes \
       --requirement /app/docker/python-runtime/requirements.lock \
     && /opt/venv/bin/pip install --no-cache-dir --no-deps --no-build-isolation '/app/harness[s3]' \
+    && cp /app/harness/workflow.yaml /opt/venv/lib/python3.12/site-packages/workflow.yaml \
     && /opt/venv/bin/tht vector migrate --help >/dev/null
 
 COPY --from=backend-build /src/backend/dist /app/backend/dist