spec: ensure sudo is not installed as dependency
spec: ensure only root and user have interactive shells
spec: clarify wording in output for dockerfile
spec: ensure app image exports volumes