nginx frontend is badly configured and runs workers with id 33 instead of the created penpot user :/
So we now allow read for all. Should be fine since nginx is serving this anyway
This now uses the new docker compose plugin.
Because we used docker-compose v1.24.1 to this point due to centos needing to install C toolchains to build never versions, the newest Docker v25 breaks compatibility and we need to use something newer.
