fix: tenant-service 部署根目录改为读写挂载

自动修复功能需要写入 nginx 配置和 docker-compose.yml，
只读挂载会导致一键更新中的配置修复步骤失败。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -36,7 +36,7 @@ services:
       PRIVATE_DEPLOY_ROOT: "${PRIVATE_DEPLOY_ROOT:-/opt/xuqm-private}"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - ${PRIVATE_DEPLOY_ROOT:-/opt/xuqm-private}:${PRIVATE_DEPLOY_ROOT:-/opt/xuqm-private}:ro
+      - ${PRIVATE_DEPLOY_ROOT:-/opt/xuqm-private}:${PRIVATE_DEPLOY_ROOT:-/opt/xuqm-private}
     restart: unless-stopped
 
   # ---------------------------------------------------------------------------