Non-root container

* galaxy now runs as non-root
* add install-repo-script
* add new docker-in-docker option
* several small enhancements