fix: resolve Sveden upload permissions and CSRF cookie issue

- Add hostgroup (GID 1000) to Dockerfile so www-data inside container can write to sveden/
- Add credentials: 'same-origin' to fetch calls in Sveden.vue and QuickUpload.vue to send session cookies

_docker/app/Dockerfile

@@ -55,6 +55,10 @@ RUN curl -sS https://getcomposer.org/installer | php -- \
 # Создание необходимых директорий для Laravel
 RUN mkdir -p storage/framework/views storage/framework/sessions storage/framework/cache storage/logs bootstrap/cache
 
+# Добавляем www-data в группу с GID=1000 (совпадает с GID хост-пользователя)
+RUN groupadd -g 1000 hostgroup 2>/dev/null || true \
+    && usermod -aG hostgroup www-data
+
 # Установка правильных прав доступа
 RUN chown -R www-data:www-data storage bootstrap/cache \
     && chmod -R 775 storage bootstrap/cache

resources/js/Pages/Dashboard/QuickUpload.vue

@@ -214,6 +214,7 @@ const upload = async () => {
     const response = await fetch(route('dashboard.quick-upload.store'), {
       method: 'POST',
       body: formData,
+      credentials: 'same-origin',
       headers: {
         'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
         'X-Requested-With': 'XMLHttpRequest',

resources/js/Pages/Dashboard/Sveden.vue

@@ -216,6 +216,7 @@ const upload = async () => {
     const response = await fetch(route('dashboard.sveden.store'), {
       method: 'POST',
       body: formData,
+      credentials: 'same-origin',
       headers: {
         'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
         'X-Requested-With': 'XMLHttpRequest',