🩹 fix-simple: fix install and install-dev targets in Makefile and minor change in Dockerfile

For the Dockerfile, create the system account in the production image without a login shell and a home directory.

Author: bassemkaroui

template/Makefile.jinja

@@ -2,13 +2,13 @@
 install: ## Install the virtual environment and install the pre-commit hooks
 	@command -v uv >/dev/null 2>&1 || { echo "⚡ uv not found, installing..."; curl -LsSf https://astral.sh/uv/install.sh | sh; }
 	@echo "🚀 Creating virtual environment using uv"
-	@uv sync
+	@uv sync --no-dev
 
 .PHONY: install-dev
 install-dev: ## Install the virtual environment with the dev dependencies and install the pre-commit hooks
 	@command -v uv >/dev/null 2>&1 || { echo "⚡ uv not found, installing..."; curl -LsSf https://astral.sh/uv/install.sh | sh; }
 	@echo "🚀 Creating virtual environment using uv"
-	@uv sync
+	@uv sync --all-extras
 	@uv run pre-commit install -f
 
 .PHONY: check

template/{% if dockerfile %}Dockerfile{% endif %}.jinja

@@ -38,7 +38,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
 FROM python:{{ python_version }}-slim-bookworm AS prod
 
 {% if not privileged_container -%}
-RUN groupadd -r {{ project_name }} && useradd -r -g {{ project_name }} {{ project_name }}
+RUN groupadd -r {{ project_name }} && useradd -r -g {{ project_name }} -M -s /usr/sbin/nologin {{ project_name }}
 
 RUN mkdir -p /workspaces/{{ project_name }} && chown -R {{ project_name }}:{{ project_name }} /workspaces
 {%- endif %}