fix: disable bwrap sandboxing on codegen service (Fargate workaround) (#116)

ECS Fargate doesn't support unprivileged user namespaces which bwrap requires.
This caused /api/v1/loader/html/* endpoints to return empty HTML.

DISABLE_BWRAP=1 bypasses the bubblewrap sandbox. This is a temporary fix
until the codegen service is migrated to EC2 launch type with user namespaces enabled.

Author: field123

terraform/services/codegen/main.tf

@@ -45,6 +45,7 @@ module "codegen_service" {
     GENERIC_WORKER_POOL_SIZE = tostring(var.generic_worker_pool_size)
     LOADER_ASSETS_BUCKET     = local.loader_assets_bucket
     DEBUG                    = "connect:typeorm"
+    DISABLE_BWRAP            = "1" # Disable bubblewrap sandboxing (not supported on Fargate)
   }
 
   # Secrets - DATABASE_URI contains the full PostgreSQL connection string