feat: 🐳 run as non-root user and update file ownership

- Added non-root user 'user' with UID 1000
- Set environment variables for user home and updated PATH
- Changed COPY commands to preserve user ownership with --chown option
- Updated WORKDIR to new user home directory
- Enabled 'uv sync' command in the build process

This enhances security by avoiding root privileges in the container and ensures proper permissions for application files.

Dockerfile

@@ -2,12 +2,17 @@ FROM python:3.12
 
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /bin/uv
 
-COPY datalia/ /app/datalia/
-COPY dbt/ /app/dbt/
-COPY Makefile pyproject.toml uv.lock /app/
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
 
-WORKDIR /app
+COPY --chown=user datalia/ $HOME/app/datalia/
+COPY --chown=user dbt/ $HOME/app/dbt/
+COPY --chown=user Makefile pyproject.toml uv.lock $HOME/app/
 
-# RUN [ "uv", "sync" ]
+WORKDIR $HOME/app
+
+RUN [ "uv", "sync" ]
 
 CMD [ "uv", "run", "dagster", "dev", "-h", "0.0.0.0", "-p", "7860" ]