run container unprivileged

we would like to add to our helm chart & argocd config:

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 101
  runAsGroup: 101

securityContext:
  allowPrivilegeEscalation: false

similar to dariah-de-documentation and textgrid-de-documentation