fix: add USER directive to Dockerfile for Trivy DS002 compliance

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: 2 people

Dockerfile

@@ -9,5 +9,6 @@ RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /gosqlx-mcp ./cmd/gosq
 # Stage 2: Runtime
 FROM gcr.io/distroless/static:nonroot
 COPY --from=builder /gosqlx-mcp /gosqlx-mcp
+USER nonroot:nonroot
 EXPOSE 8080
 ENTRYPOINT ["/gosqlx-mcp"]