Run cache and seeder as non-root user

Static config is now directly encoded in the image instead of generated at runtime.

Dynamic mapcache.xml is still being generated in a special writable dir.