fix(cistech-tunnel): add --no-sandbox for chromium running as root

apps/cistech-tunnel/build/scripts/entrypoint.sh

@@ -3,6 +3,10 @@
 
 set -euo pipefail
 
+# Qt/Chromium flags for running as root
+export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu"
+export QTWEBENGINE_DISABLE_SANDBOX=1
+
 # Setup TigerVNC password file from env var (passed by runtipi)
 if [ -n "${VNC_PASSWORD:-}" ]; then
     mkdir -p /root/.vnc