docker: drop privileges to improve security

Dockerfile

@@ -8,4 +8,6 @@ RUN npm install
 
 COPY . /app
 
+RUN mkdir /app/node_modules/.cache && chown nobody /app/node_modules/.cache
+USER nobody
 CMD ["npm", "start"]