Run the container as a non-root user (item from review: Dockerfile hardening)

Mirror SERPent from Hugging Face Space with bug fixes