Migrate from deprecated google-generativeai to google-genai (>=1.0) using the
new Client-based API, and fix SQLite "unable to open database file" in Docker
by chowning the data directory to appuser before switching users.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>