refactor(base/cadvisor): 优化cAdvisor容器挂载卷和权限配置

调整挂载卷顺序并移除不必要的只读限制，将/var/run改为读写模式以提升监控功能

base/cadvisor.stack.yaml

@@ -9,11 +9,9 @@ services:
     ports:
       - 9180:8080
     volumes:
-      - '/dev/disk/:/dev/disk:ro'
-      - '/data/docker/:/var/lib/docker:ro'
-      - '/sys:/sys:ro'
-      - '/var/run:/var/run:ro'
-      - '/:/rootfs:ro'
-    user: '1000:1000'
-    privileged: true
-    read_only: true
+      - /:/rootfs:ro
+      - /data/docker/:/var/lib/docker:ro
+      - /var/run:/var/run:rw
+      - /sys:/sys:ro
+      - /dev/disk/:/dev/disk:ro
+    privileged: true