Summary

• switch to a multi-stage Docker build that installs rendercv into a dedicated virtual environment in the builder image
• copy only the pre-built venv into the runtime layer and drop build tooling to keep the final image slim
• add configurable UID/GID args and run as a non-root rendercv user by default for better container hygiene

Testing

• docker build -t rendercv:test .

Image size comparison