new: docker image workflow

Signed-off-by: ngn <ngn@ngn.tf>

Dockerfile

@@ -2,16 +2,23 @@ FROM golang:1.23.2
 
 WORKDIR /app
 
-COPY *.go  ./
-COPY *.mod ./
-COPY *.sum ./
+RUN useradd runner -r -u 1001 -d /app
+RUN chown -R runner:runner /app
+USER runner
 
+COPY *.mod    ./
+COPY *.sum    ./
+
+RUN go mod download
+
+COPY *.go      ./
+COPY Makefile  ./
 COPY lib       ./lib
 COPY log       ./log
 COPY public    ./public
 COPY routes    ./routes
 COPY templates ./templates
 
-RUN go build
+RUN make
 
 ENTRYPOINT ["/app/security"]