Set to non-root user

Dockerfile

@@ -1,12 +1,12 @@
 # Use the same container for the HF-space that we compiled for general use
 FROM silterra/diffdock-pocket-dev
+USER $APPUSER
 
-COPY . /app
+COPY --chown=$APPUSER:appgroup . /app
 
 WORKDIR /app
 
 EXPOSE 8501
-ENV MAMBA_ROOT_PREFIX="/root/micromamba"
 
 # Run streamlit app under conda environment
 # ENTRYPOINT ["/bin/micromamba", "run", "-n", "diffdock-pocket", "streamlit", "run", "app.py"]