Update Dockerfile to run as non-root, and to add user before any installs to ensure consistent IDs
Update Dockerfile to create a system group, not a user group