make all docker services run rootless

• AllegroRSS
• ASF
• avocado-server
• benchmark-webserver
• bitwarden_rs
• dockerhub-rss - reported to upstream
• funkwhale - reported to upstream
  • flaczek
  • api
  • celeryworker
  • celerybeat
  • nginx
  • redis
• gitlab (God. It runs as root..)
• haproxy
  • certbot
• matrix
  • synapse and workers
  • maubot
  • element
  • haproxy
  • mautrix-facebook
  • mautrix-telegram
  • redis
• mc-creative
• mc-redstone
• mirror
  • nginx
  • rsyncd
  • rsync
  • sync-arch
  • sync-arch32
• mumble
• netboot
  • samba
  • http
• nextcloud
  • php-fpm
  • cron
  • nginx
  • redis
• OLX-RSS
  • nginx
  • php-fpm
• pipewire-net-audio
• plausible
• postgres
• telegram-ark
• telegram-deezer-search
• telegram-sjp
• telegram-tidal-search
• telegram-uno
• telegram-userbenchmark
• waterfall
• xmpp
• shynet