fix: Lift user priviledges.

Dockerfile

@@ -3,17 +3,19 @@
 
 FROM python:3.9
 
+COPY requirements.txt .
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
-COPY --chown=user . /code
+RUN useradd -m -u 1000 user
+USER user
 
-WORKDIR /code
+ENV HOME=/home/user
+ENV PATH=/home/user/.local/bin:$PATH
 
-RUN pip install --no-cache-dir --upgrade -r requirements.txt
+WORKDIR $HOME/app
 
-RUN useradd -m -u 1000 user
+COPY --chown=user . $HOME/app
 
-# Change the port number of our Wave app to 7860
-# which is default in Hugging Face Spaces.
 ENV H2O_WAVE_LISTEN=":7860"
 ENV H2O_WAVE_ADDRESS='http://127.0.0.1:7860'