Use NB_UID for USER statement in Dockerfile so deployment platform can verify that image doesn't run as root.