Migrate to alo organization

Update docker image path and workflow reference to use alo org.
Fix var directory permissions in docker build.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   deploy:
-    uses: ppetru/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
+    uses: alo/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
     with:
       service_name: animaltrack
     secrets: inherit

docker.nix

@@ -19,7 +19,7 @@ let
   };
 in
 pkgs.dockerTools.buildImage {
-  name = "gitea.v.paler.net/ppetru/animaltrack";
+  name = "gitea.v.paler.net/alo/animaltrack";
   tag = "latest";
 
   copyToRoot = pkgs.buildEnv {
@@ -47,6 +47,9 @@ pkgs.dockerTools.buildImage {
   # Create required directories without runAsRoot (which needs KVM)
   extraCommands = ''
     mkdir -p -m 1777 tmp
+    # var may already exist from nix packages with restrictive permissions
+    chmod 755 var 2>/dev/null || mkdir -p -m 755 var
+    mkdir -p -m 755 var/lib
     mkdir -p var/lib/animaltrack
   '';