Move a few things around

- move runtime dep install into a `RUN` line since they stick around (so we can have that get cached and speed up rebuilds)
- add `/usr/local/nginx/sbin` directly to our path instead of symlinking the `nginx` binary into `/usr/local/sbin` in case future versions have multiple useful binaries