fix(docker): materialise tracked files before uv sync

The selective COPYs in the runtime stage leave most tracked files
(LICENSE, README, .github/, Dockerfile itself, …) missing from /app.
hatch-vcs/setuptools_scm interprets those as deleted in the working
tree during `uv sync` and stamps the package with a +dYYYYMMDD dirty
suffix. Combined with the next-dev guess that also kicks in on dirty
trees, the version came out as e.g. 0.9.1.dev0+g<sha>.d20260520
instead of 0.9.0.

Run `git checkout -- .` right after `COPY .git` so the index
re-materialises the missing files. The working tree is then clean,
hatch-vcs reads the tag straight, and the version computed at sync
time is baked into the installed package metadata before the css
builder later overlays /app/src/struudel/static/css/app.css.

Author: mxhash

Dockerfile

@@ -57,6 +57,14 @@ COPY src ./src
 COPY alembic ./alembic
 COPY .git ./.git
 
+# The selective COPYs above leave most tracked files (LICENSE, README,
+# .github/, …) missing from /app. Without this, hatch-vcs sees those as
+# "deleted" in the working tree and stamps the build with a +dXXXXXXXX
+# dirty suffix. `git checkout -- .` materialises everything from the
+# index, so `uv sync` reads a clean tree and produces the correct
+# version (e.g. 0.9.0 instead of 0.9.1.dev0+gSHA.dDATE).
+RUN cd /app && git checkout -- .
+
 RUN --mount=type=cache,target=/app/.cache/uv \
     uv sync --all-groups