fix docker deployment

docker/entrypoint-cron.sh

@@ -7,6 +7,7 @@ printenv | grep -E '^(PATH|DJANGO_|SECRET_|DB_|KARUNG_|IOT_|CHICKEN_COUNTING_|DA
 
 # Render publish-time cron from DASHBOARD_PUBLISH_* (default 17:00).
 # Edge syncs are OFF by default at HQ (mirror via city-sites); commands no-op when disabled.
+# File lives in /etc/cron.d (requires username field) — do not feed it to `crontab`.
 PUBLISH_HOUR="${DASHBOARD_PUBLISH_HOUR:-17}"
 PUBLISH_MINUTE="${DASHBOARD_PUBLISH_MINUTE:-0}"
 CRON_FILE=/etc/cron.d/executive
@@ -20,9 +21,10 @@ CRON_FILE=/etc/cron.d/executive
   echo ""
   echo "# Daily publish — optional karung sync then KPI rollups at configured cutoff."
   echo "${PUBLISH_MINUTE} ${PUBLISH_HOUR} * * * root cd /app && /usr/local/bin/python manage.py sync_karung_from_web_admin >> /var/log/cron.log 2>&1 && /usr/local/bin/python manage.py recompute_kpi_rollups >> /var/log/cron.log 2>&1"
+  echo ""
 } > "$CRON_FILE"
 chmod 0644 "$CRON_FILE"
-crontab "$CRON_FILE"
+touch /var/log/cron.log
 
 if [ "${KARUNG_WEB_ADMIN_SYNC_ENABLED:-false}" = "true" ] || [ "${KARUNG_WEB_ADMIN_SYNC_ENABLED:-false}" = "True" ]; then
   /app/karung_sync_loop.sh &