fix: build and permissions

deploy/php-fpm/zz-logging.conf

@@ -0,0 +1,2 @@
+[global]
+error_log = /dev/stderr

deploy/php-fpm/zz-socket.conf

@@ -1,24 +1,16 @@
-; Use a unix socket and ensure nginx can access it
-[global]
-; (keep global defaults)
-
 [www]
 listen = /run/php/php-fpm.sock
 listen.owner = www-data
 listen.group = nginx
 listen.mode  = 0660
-
-; Keep default user/group for PHP workers
 user  = www-data
 group = www-data
 
-; Sensible FPM settings
 pm = dynamic
 pm.max_children = 10
 pm.start_servers = 2
 pm.min_spare_servers = 2
 pm.max_spare_servers = 5
 
-; Clear env for security, but allow PATH
 clear_env = yes
 env[PATH] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin