fix: correct container socket path in Dockerfile and release smoke test

The armor user owns /var/run/armor/ but the ENTRYPOINT was writing the
socket to /var/run/armor.sock (parent directory, not writable). Changed
to /var/run/armor/armor.sock throughout: ENTRYPOINT, HEALTHCHECK, and
the release workflow smoke-test health check.

Author: tkdtaylor

.github/workflows/release.yml

@@ -166,7 +166,7 @@ jobs:
       - name: Smoke test daemon health inside container
         run: |
           for i in {1..30}; do
-            if docker exec armor-smoke armor health; then
+            if docker exec armor-smoke armor health --socket /var/run/armor/armor.sock; then
               exit 0
             fi
             sleep 2

docker/Dockerfile

@@ -62,7 +62,7 @@ USER armor
 
 # Health check: verify daemon can start (this will fail initially until daemon starts listening)
 HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
-    CMD test -S /var/run/armor.sock || exit 1
+    CMD test -S /var/run/armor/armor.sock || exit 1
 
 # Entry point: run the daemon with the baked model
-ENTRYPOINT ["armor", "daemon", "--socket", "/var/run/armor.sock", "--db", "/var/lib/armor/armor.db", "--model", "/models/active.gguf"]
+ENTRYPOINT ["armor", "daemon", "--socket", "/var/run/armor/armor.sock", "--db", "/var/lib/armor/armor.db", "--model", "/models/active.gguf"]