fix(cac-lsphp): entrypoint operates on the /mnt/users docroot, not /home/$user

Code-review integration fixes:
- entrypoint-lsphp.sh: the shared-ols tier mounts the docroot at
  /mnt/users/<user>/<domain> (NOT /home/$user). Discover the mount via glob
  (one site per sidecar; wildcard-safe), create public_html + logs/php-fpm under
  it (so OLS docRoot exists), point lsphp error_log there, and chown just those
  dirs. Verified: sidecar creates public_html under the mount, runs as the
  per-site user, OLS serves PHP (SAPI=litespeed) end-to-end.
- shared-ols vhconf.tpl: per-vhost logs -> /usr/local/lsws/logs/<vhname>.* (the
  shared-ols container has no /home/<user>).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

configs/shared-ols/vhconf.tpl

@@ -59,12 +59,14 @@ context / {
 ## cache block here. OLS stores each vhost's cache in its own subdir under the
 ## module storagePath automatically (per-vhost isolation, spec 5.2).
 
-errorlog ~~LOG_DIR~~/error_log {
+## Per-vhost logs in the shared-ols container's OWN writable log dir (NOT
+## /home/<user>, which doesn't exist here, and NOT the read-only /mnt/users mount).
+errorlog /usr/local/lsws/logs/~~VHNAME~~.error_log {
   logLevel                WARN
   rollingSize             50M
   keepDays                7
 }
-accesslog ~~LOG_DIR~~/access_log {
+accesslog /usr/local/lsws/logs/~~VHNAME~~.access_log {
   rollingSize             50M
   keepDays                7
 }