Allow heading tags (h1-h6) in ContentSanitizer so news editor headings render

services/enhance-worker/scripts/entrypoint.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Ensure storage directories are writable by the worker user.
+# Bind-mounted host directories may have been created with restrictive
+# permissions, so we fix them here before dropping to the worker user.
+chmod 777 /app/storage/tmp /app/storage/output 2>/dev/null || true
+
+exec gosu worker "$@"