Update Dockerfile

Dockerfile

@@ -29,14 +29,18 @@ COPY . .
 # Ensure the /app directory (and its subdirectories) are writable
 RUN chmod -R 777 /app
 
+RUN chmod u+w /app/.hugo_build.lock 
+
 # Remove any stale Hugo build lock file
 RUN rm -f /app/.hugo_build.lock
 
+WORKDIR /app
+RUN mkdir -p /app && chown -R hugo:hugo /app
+USER hugo
+
 # (Optional) If you use Hugo Modules, refresh them:
 RUN hugo --ignoreCache && hugo mod clean && hugo mod get
 
-RUN chmod u+w /app/.hugo_build.lock 
-
 # Build the Hugo site with --noTimes to avoid file time updates
 RUN rm -f /app/.hugo_build.lock && hugo --noTimes