Docker tutorial for 2026: build a multi-stage, non-root Flask image in 12 steps, scan it, lock down the runtime and push it ...