- add .dockerignore to minimize build context - add runtime ldap and sasl libraries - add entrypoint script to allow initialization as root and drop privileges for gvaldap.sh - add importlib-metadata dependency required by celery
