fix(tools): run tools image as non-root operator (#114)

Stage ProjectDiscovery binaries before installing them into /usr/local/bin, run the tools image as the existing Kali operator identity, preserve runtime access to Foundry tools, and cover the non-root Dockerfile and smoke-test contracts.

scripts/check-tools-image.sh

@@ -17,7 +17,7 @@ if ! command -v docker >/dev/null 2>&1; then
 fi
 
 echo "Checking tools image: $IMAGE"
-docker run --rm --platform linux/amd64 "$IMAGE" bash -lc '
+docker run --rm --platform linux/amd64 "$IMAGE" bash -c '
   set -e
   fail=0
   for c in radare2 gdb objdump upx; do