- Set `User` and `Group` for the bot service to enhance security and isolation. - Added system user and group for `claude-bot` with defined home directory. - Modified secrets ownership to align with the new bot user.