Update Dockerfile

Dockerfile

@@ -2,15 +2,17 @@ FROM python:3.9-slim
 
 WORKDIR /app
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y git
+# System deps + non-root user
+RUN apt-get update && apt-get install -y git && \
+    useradd -m appuser && chown -R appuser:appuser /app
 
-# Install Python dependencies
+USER appuser
+
+# Python dependencies
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Copy application files
-COPY . .
+# App files
+COPY --chown=appuser:appuser . .
 
-# Start command
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]