fix: guard static asset deploy permissions

tests/test_frontend_v2_assets.py

@@ -1,9 +1,19 @@
+import stat
 from pathlib import Path
 
 
 ROOT = Path(__file__).resolve().parents[1]
 
 
+def test_static_assets_are_container_readable():
+    unreadable = []
+    for asset in (ROOT / "web/static").rglob("*"):
+        if asset.is_file() and not (asset.stat().st_mode & stat.S_IROTH):
+            unreadable.append(str(asset.relative_to(ROOT)))
+
+    assert unreadable == []
+
+
 def test_frontend_v2_shell_assets_exist_and_are_indexed():
     assert (ROOT / "web/static/css/ewoooc-tokens.css").exists()
     assert (ROOT / "web/static/css/ewoooc-shell.css").exists()