Run as non-root by default via PUID/PGID
enhancementmajor
CI / build-and-scan (pull_request) Successful in 1m7s