Add dockerfile
Setup non-root user for docker, specify default cmd