Elaborate container image usage instructions

Explain that the base image expects to run as non-root and the implications of
this, and expand the example 'docker run' options in detail.