fix(docker): let SELinux hosts read the bind-mounted checkout (#1391)

Allow the Docker checkout bind mount on SELinux hosts.

Contribution by @anilguvenc.

docs/CURRENT-STATE.md

@@ -1,5 +1,9 @@
 # God's Eye View Current State
 
+Docker Compose mounts the checkout with the shared SELinux `:z` label so
+containers can read it on enforcing SELinux hosts. The separate image-owned
+`node_modules` volume and loopback-only port publishing remain unchanged.
+
 Aircraft detection candidates reuse normalized display text until callsign or
 registration changes, including in-place enrichment. Each candidate resolves its
 fleet model once per collection. Positions, model ownership and tracked-aircraft