Fix rootless windmill container: use uid=1000, fix tmpfs modes, CA certs, WINDMILL_DIR

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/81d1b5cc-ab2d-4337-801b-25755355183e

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

php/containers.json

@@ -966,6 +966,7 @@
       "image_tag": "%AIO_CHANNEL%",
       "display_name": "Windmill",
       "image": "ghcr.io/nextcloud-releases/aio-windmill",
+      "user": "1000",
       "init": true,
       "internal_port": "8000",
       "expose": [
@@ -1003,6 +1004,13 @@
         "nextcloud_aio_windmill_db"
       ],
       "restart": "unless-stopped",
+      "read_only": true,
+      "tmpfs": [
+        "/tmp",
+        "/var/run/postgresql",
+        "/var/log/supervisord",
+        "/var/run/supervisord"
+      ],
       "profiles": [
         "windmill"
       ],