Update n8n configuration to latest recommendations

- Remove deprecated EXECUTIONS_PROCESS variable
- Enable task runners with N8N_RUNNERS_ENABLED
- Offload manual executions to workers
- Enforce settings file permissions
- Configure security settings for env access and Git node

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docker-compose.yml

@@ -18,20 +18,24 @@ services:
       N8N_LOG_OUTPUT: console,file
       N8N_LOG_FILE_LOCATION: /var/log/n8n/n8n.log
       N8N_LOG_LEVEL: info
-      EXECUTIONS_PROCESS: main
       EXECUTIONS_MODE: queue
       QUEUE_BULL_REDIS_HOST: redis
       QUEUE_BULL_REDIS_PORT: 6379
+      N8N_RUNNERS_ENABLED: "true"
+      OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS: "true"
       N8N_PAYLOAD_SIZE_MAX: 16
-      EXECUTIONS_DATA_PRUNE: true
+      EXECUTIONS_DATA_PRUNE: "true"
       EXECUTIONS_DATA_MAX_AGE: 168
       EXECUTIONS_DATA_SAVE_ON_ERROR: all
       EXECUTIONS_DATA_SAVE_ON_SUCCESS: all
-      EXECUTIONS_DATA_SAVE_MANUAL_EXECUTIONS: true
+      EXECUTIONS_DATA_SAVE_MANUAL_EXECUTIONS: "true"
       N8N_DEFAULT_BINARY_DATA_MODE: filesystem
       EXECUTIONS_TIMEOUT: 3600
       EXECUTIONS_TIMEOUT_MAX: 7200
-      N8N_SECURE_COOKIE: true
+      N8N_SECURE_COOKIE: "true"
+      N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS: "true"
+      N8N_BLOCK_ENV_ACCESS_IN_NODE: "false"
+      N8N_GIT_NODE_DISABLE_BARE_REPOS: "true"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.n8n.rule=Host(`${DOMAIN}`)"