Figure out how to run webhook container rootless

[humphd]

By default, most Docker containers are run using root. It would be nice if we could find a way to allow our webhook container to use the Docker socket (i.e., to communicate with the host and trigger updates via docker-cli calls) while not being the root user.