promtail and canary need run as non-root

[james-callahan]

promtail and loki-canary should set spec.securityContext.runAsNonRoot: true to meet the kubernetes Pod Security Standards

[james-callahan]

This was only partially fixed by #45, promtail is still running as root.

That is more tricky to fix, as it needs permission to read journald files as well as docker logs from the host.

[sgutwein]

Any updates?