fix(deploy): give BEAM entrypoint caps and Caddy access to Bluesky

Restore CHOWN/SETUID/SETGID/etc. after cap_drop ALL so containers boot.
Attach bluesky_pds to the proxy network so Caddy can resolve it.

deploy/docker/compose.full.yml

@@ -416,7 +416,9 @@ services:
     volumes:
       - bluesky_pds_data:/pds
     networks:
+      # App/backend network for admin/API; proxy network so Caddy can resolve bluesky_pds
       - elektrine_network
+      - caddy_proxy_network
     restart: unless-stopped
     cap_drop:
       - ALL