Review root/customer pattern in docker image

[drewbo]

Currently we run the build script as root but most commands assume the customer user prior to running for security reasons. The root user is needed to connect to the database and avoid exposing AWS credentials. If we could run another agent outside the build script specifically for logging (perhaps in conjunction with implementing log drain per #248), we could run the script as the customer user and simplify the build and security logic.

Acceptance Criteria

• Research outside agent logging options
• Update this ticket to indicate implementation plan