fix(infra): correct doppler entrypoint for watchtower container

- Fix binary path: /usr/bin/doppler (not /usr/local/bin)
- Mount /root/.doppler config so the container can auth without DOPPLER_TOKEN env
- Set HOME=/root so doppler locates the mounted config directory
- Add explicit --project/--config flags to override directory-scope lookup
- Production: --project libnovel --config prd
- Homelab: --project libnovel --config prd_homelab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -406,13 +406,14 @@ services:
   watchtower:
     image: containrrr/watchtower:latest
     restart: unless-stopped
-    entrypoint: ["doppler", "run", "--"]
+    entrypoint: ["/usr/bin/doppler", "run", "--project", "libnovel", "--config", "prd", "--"]
     command: ["/watchtower", "--label-enable", "--interval", "300", "--cleanup"]
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - /usr/local/bin/doppler:/usr/local/bin/doppler:ro
+      - /usr/bin/doppler:/usr/bin/doppler:ro
+      - /root/.doppler:/root/.doppler:ro
     environment:
-      DOPPLER_TOKEN: "${DOPPLER_TOKEN}"
+      HOME: "/root"
       DOCKER_API_VERSION: "1.44"
 
 volumes:

homelab/docker-compose.yml

@@ -448,13 +448,14 @@ services:
   watchtower:
     image: containrrr/watchtower:latest
     restart: unless-stopped
-    entrypoint: ["doppler", "run", "--"]
+    entrypoint: ["/usr/bin/doppler", "run", "--project", "libnovel", "--config", "prd_homelab", "--"]
     command: ["/watchtower", "--label-enable", "--interval", "300", "--cleanup"]
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - /usr/local/bin/doppler:/usr/local/bin/doppler:ro
+      - /usr/bin/doppler:/usr/bin/doppler:ro
+      - /root/.doppler:/root/.doppler:ro
     environment:
-      DOPPLER_TOKEN: "${DOPPLER_TOKEN}"
+      HOME: "/root"
       DOCKER_API_VERSION: "1.44"
 
 volumes: