Shepherd report dir mounted to host

Problem: Pipeline Shepherd’s REPORT_DIR (/data/shepherd) was not in the docker-compose volume mounts, so daily reports + dedup state lived in the container writable layer and were wiped on every image rebuild.

Fix (entirely-api e573c33): - /data/shepherd:/data/shepherd added to the unlikely-api and worker services. Scheduler only enqueues the ARQ job (never executes shepherd code — its layer never contained the dir), so its deliberately-minimal mount list was left alone.

Host dir: /data/shepherd, root:claude 775 (portal-auth convention). Reports 2026-07-28 → 2026-08-04 were salvaged from the worker’s writable layer via docker cp before the containers were recreated, so dedup continuity is preserved.

Verified: mount rw in both containers, write-through to host confirmed, API healthy after recreate. Final confirmation: next shepherd run writes a new dated report to the host path.

Related: pipeline-shepherd