credit-pack hint: patch budget-exceeded message at BUILD time (runtime rootfs is read-only; boot-time patch crashed startup)

Dockerfile

@@ -20,6 +20,15 @@ RUN chmod +x /app/code/start.sh
 # Default config — will be overridden by Cloudron env vars at runtime
 COPY config.yaml /app/data/config.yaml
 
+# Append the co-op credit-pack hint to LiteLLM's hardcoded budget-exceeded
+# messages. Done at BUILD time — the runtime rootfs is read-only under
+# Cloudron, so a boot-time patch would crash the startup script (it did,
+# 2026-10-06). patch_budget_message.py is non-fatal: it exits 0 even when the
+# file/message can't be found, so a future LiteLLM version bump can't take the
+# gateway down.
+COPY patch_budget_message.py /app/code/patch_budget_message.py
+RUN python3 /app/code/patch_budget_message.py
+
 # Override the base image's ENTRYPOINT (which is `litellm`) so our
 # startup script runs instead of being passed as an argument to litellm.
 ENTRYPOINT ["/app/code/start.sh"]