Use chown with 755 permissions instead of 777 for better security

Co-authored-by: eeholmes <2545978+eeholmes@users.noreply.github.com>

Author: Copilot

Dockerfile

@@ -16,7 +16,7 @@ RUN wget -qO- https://raw.githubusercontent.com/retorquere/zotero-deb/master/ins
 # Copy the repo files into /tmp (environment/*.yml, install.R, etc)
 COPY . /tmp/
 # Fix permissions so NB_USER can write to /tmp/environment during package installs
-RUN chmod -R 777 /tmp/environment
+RUN chown -R ${NB_USER}:${NB_USER} /tmp/environment && chmod -R 755 /tmp/environment
 
 # Update conda env sequentially to prevent hairy solve
 RUN /pyrocket_scripts/install-conda-packages.sh /tmp/environment/env-core1.yml || (echo "install env-core1 failed" && exit 1)