Fix cache ownership permissions

Dockerfile

@@ -1,24 +1,26 @@
+
 # Use the official Python 3.9 slim image
 FROM python:3.9-slim
 
 # Set the working directory inside the container
 WORKDIR /code
 
-# Create a directory for the model cache and set the HF_HOME environment variable.
-# This tells the transformers library to download models here instead of the root .cache folder.
-RUN mkdir /code/cache
+# Create a directory for the model cache, and change its ownership to the non-root user.
+# The user is 'user' in the standard Hugging Face environment.
+RUN mkdir /code/cache && chown -R user:user /code/cache
+
+# Set the HF_HOME environment variable to point to our new cache directory.
 ENV HF_HOME /code/cache
 
-# Copy the requirements file into the container
+# Copy the requirements file and install dependencies
 COPY ./requirements.txt /code/requirements.txt
-
-# Install the Python dependencies
 RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 
-# Copy the main application file into the container
+# Copy the application code
 COPY ./main.py /code/main.py
 
-# Command to run the FastAPI server with Uvicorn
-# We use --host 0.0.0.0 to make it accessible from outside the container
-# and --port 7860 as this is the standard port Hugging Face Spaces expects
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]
+# Switch to the non-root user before running the app
+USER user
+
+# Command to run the FastAPI server
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]