Hardening

Container Security Hardening

Non-root, read-only fs, capabilities, seccomp