fix (Dockerfile): sudo for 'www' preserves PATH
feat: add graceful warning when IMPORT_GITHUB_PUB_KEYS is not set
feat: suid for some commands used by 'www' user

With this change npm, gem can be used w/o sudo command.
`composer selfupdate` also works w/o sudo
CircleCI tests