Clean up Dockerfile

[mccalluc]

• Shouldn't need to be editable: RUN pip install --editable '.[app]'
• Now that we're not using the install location for mutable data, should be able to switch to a less privileged user by uncommenting the lines from the template?