fix(input): base watcher on debian

input/Docker/Dockerfile

@@ -1,27 +1,25 @@
-FROM node:20-bookworm
+FROM debian:bookworm
 
 ENV DEBIAN_FRONTEND=noninteractive \
     PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
-    PUID=1000 \
-    PGID=1000 \
     CODEX_HOME=/home/codex
 
 RUN apt-get update \
     && apt-get install --yes --no-install-recommends \
+        ca-certificates \
+        curl \
+        nodejs \
+        npm \
         python3 \
         python3-venv \
+        tzdata \
+    && npm install --location=global @openai/codex \
+    && groupadd --gid 1000 codex \
+    && useradd --uid 1000 --gid 1000 --create-home --shell /bin/bash codex \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
-# Install the official Codex CLI so the container can invoke `codex prompt`.
-# The CLI expects credentials/configuration from the mounted ~/.codex directory.
-RUN npm install --location=global @openai/codex
-
-RUN groupmod --new-name codex node \
-    && usermod --login codex --home /home/codex --move-home node \
-    && chown -R codex:codex /home/codex
-
 WORKDIR /app
 
 COPY watch_and_customize.py entrypoint.sh JobDescriptionNormalizerPrompt.md ./