fix: update compose submodule to include USER hermes fix
The compose submodule now points to commit 54e0661 which adds the missing USER hermes at the end of the Hermes Dockerfile. This ensures all container processes run as uid 10000 instead of root, fixing the privilege leak where background subprocesses escaped the gosu drop and created root-owned files in ExoKortex that broke Syncthing sync.
This commit is contained in: