fix: match docker GID 988 with host for socket access

docker/Dockerfile.control-center

@@ -58,11 +58,11 @@ COPY drizzle/ ./drizzle/
 COPY docker/entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 
-# Run as non-root user with docker access
+# Run as non-root user with docker access (GID 988 matches host docker group)
 RUN addgroup -g 1001 goclaw && \
-    addgroup -g 998 docker && \
+    addgroup -g 988 docker-host && \
     adduser -u 1001 -G goclaw -s /bin/sh -D goclaw && \
-    addgroup goclaw docker && \
+    addgroup goclaw docker-host && \
     chown -R goclaw:goclaw /app
 
 USER goclaw