feat: Run piped frontend with unprivileged user

[bjw-s]

This PR allows running the Piped frontend container as an unprivileged user instead of running it with root permissions.

It also introduces two additional environment variables that allow some control over the number of nginx worker processes and the port nginx is exposed on.