kubernetes 1 Production Docker Hardening Guide: Multi-Stage Builds, Non-Root Users, and CIS Compliance Sep 19, 2026