Fix review feedback: use /config, scope chmod, gate chown

- Use DATA_DIR=/config (config:rw map) per maintainer request
- Scope chmod to /entrypoint.sh and cont-init.d instead of whole FS
- Gate chown -R behind .initialized marker to avoid slow restarts

maintainerr/Dockerfile

@@ -63,7 +63,8 @@ COPY --from=ha_tools /out/ /
 
 # Add rootfs
 COPY rootfs/ /
-RUN find /. -type f \( -name "*.sh" \) -print -exec chmod +x {} \;
+RUN chmod +x /entrypoint.sh \
+    && find /etc/cont-init.d /etc/cont-finish.d -type f -name "*.sh" -exec chmod +x {} \; 2>/dev/null || true
 
 # Install bashio standalone
 RUN BASHIO_VERSION="0.14.3" && \