fix: store .env in SA home dir to avoid sudo for file ops

Author: JeekLee

.github/workflows/build-and-deploy.yml

@@ -114,11 +114,11 @@ jobs:
               docker pull ghcr.io/pfplay/${{ env.IMAGE_NAME }}:latest &&
               docker stop pfplay-api 2>/dev/null || true &&
               docker rm pfplay-api 2>/dev/null || true &&
-              sudo mkdir -p /app && sudo mv /tmp/pfplay.env /app/pfplay.env && sudo chmod 600 /app/pfplay.env &&
+              mv /tmp/pfplay.env ~/pfplay.env && chmod 600 ~/pfplay.env &&
               docker run -d \
                 --name pfplay-api \
                 --network api_backend \
-                --env-file /app/pfplay.env \
+                --env-file ~/pfplay.env \
                 -p 8080:8080 \
                 --restart unless-stopped \
                 ghcr.io/pfplay/${{ env.IMAGE_NAME }}:latest &&