fix: persist container auth, restore tasks filter, refine PR status UI (#883)

docker-entrypoint.sh

@@ -2,6 +2,10 @@
 set -e
 
 if [ "$(id -u)" = '0' ]; then
+    # HOME for the kandev user lives on the PV so agent CLI auth state
+    # (gh, claude, codex, auggie, copilot, amp, ...) survives pod restarts
+    # and image upgrades. Make sure it exists before dropping privileges.
+    mkdir -p /data/home
     chown -R kandev:kandev /data
     exec gosu kandev "$@"
 fi