Move docs-RAG refresh into the portal container (Gitea raw API + scheduler addon, 3:30am daily)

Dockerfile

@@ -9,7 +9,8 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Copy app
 COPY app/ ./app/
 COPY sweep.sh /app/code/sweep.sh
-RUN chmod +x /app/code/sweep.sh
+COPY rag_refresh.py /app/code/rag_refresh.py
+RUN chmod +x /app/code/sweep.sh /app/code/rag_refresh.py
 
 # Run as root (the base image default). Cloudron's sandboxing (read-only
 # rootfs, AppArmor, dropped capabilities) still applies to root inside the