use unprivileged stacks-core images

[wileyj]

should be possible with ./docker/stacks/Dockerfile - the image should use configurable uid or at a minimum not run as root.