Map root in container to docker-root user on host

All other UIDs on the host are mapped one-to-one into the container.
The mappings are enforced by default and so no impact on the CLI.
UIDs of the container root file system are translated accordingly.

TO DO: Skip UID translation if the image is pre-translated.