specific user for Docker container

COPY --from=builder /app/node_modules ./node_modules

COPY --from=builder /app/package.json ./package.json

# Create non-root user

RUN groupadd -g 10001 appuser \

    && useradd -u 10001 -g appuser -m appuser

# Fix permissions

RUN chown -R appuser:appuser /app

USER appuser

# If using custom server (e.g. Express), copy it too

# COPY --from=builder /app/server.js ./server.js