[container] Bringing secure defaults to all images

[prabhu]

cdxgen-secure image uses a non-root user and CMD instead of ENTRYPOINT.

It would be nice to bring these two useful but breaking changes to all the images, perhaps with v12. I am anticipating additional issues with Python SBOM generation with pip install, when run as non-root.