fix oauth scope mismatch

docker-compose.yml

@@ -57,12 +57,18 @@ services:
       # Storage config comes from env_file (STORAGE_DRIVER, AWS_*, S3_*)
     build:
       context: .
-      dockerfile: Dockerfile.hold
-    image: atcr-hold:latest
+      dockerfile: Dockerfile.dev
+      args:
+        AIR_CONFIG: .air.hold.toml
+    image: atcr-hold-dev:latest
     container_name: atcr-hold
     ports:
       - "8080:8080"
     volumes:
+      # Mount source code for Air hot reload
+      - .:/app
+      # Cache go modules between rebuilds
+      - go-mod-cache:/go/pkg/mod
       # PDS data (carstore SQLite + signing keys)
       - atcr-hold:/var/lib/atcr-hold
     restart: unless-stopped