have Dockerfile use a local user instead of root

* also use rust:latest so we don't have to keep bumping