Create unprivileged user for `notifypush` service

[TheRealBecks]

Something like:

RUN addgroup -S notifypush && adduser -S notifypush -G notifypush
# Set ownership for application files
COPY --chown=notifypush:notifypush . /notifypush
# Run as non-root user
USER notifypush