switched to fully self contained docker

Dockerfile

@@ -10,12 +10,15 @@ RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/tapm-se
 FROM alpine:3.22
 
 RUN apk add --no-cache ca-certificates \
-    && addgroup -S tapm \
-    && adduser -S -G tapm -H tapm
+    && addgroup -S -g 1000 tapm \
+    && adduser -S -u 1000 -G tapm -H tapm \
+    && mkdir -p /data \
+    && chown tapm:tapm /data
 WORKDIR /app
 COPY --from=build /out/tapm-server /usr/local/bin/tapm-server
 COPY --from=build /out/tapm-migrate /usr/local/bin/tapm-migrate
 COPY migrations /app/migrations
+COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/docker-entrypoint
 USER tapm
 EXPOSE 8080
-ENTRYPOINT ["/usr/local/bin/tapm-server"]
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint"]