Update Dockerfile to run as non-root