Adding support for production grade image in Dockerfile

Signed-off-by: Anushka <anush159@in.ibm.com>

Author: anushka159-a

docker/images/release/Dockerfile

@@ -2,12 +2,32 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 #
-FROM registry.access.redhat.com/ubi9/ubi-micro:9.4 AS prod
+FROM registry.access.redhat.com/ubi9/ubi-micro:9.5 AS prod
 ARG BIN
 ARG ARCHBIN_PATH
-ARG PORTS
 ARG TARGETOS
 ARG TARGETARCH
+ARG PORTS
+
+# --- Create a non-root user (UBI-micro does not include useradd) ---
+USER 10001
+
+# --- Create working directory ---
+WORKDIR /app
 
-COPY ${ARCHBIN_PATH}/${TARGETOS}-${TARGETARCH}/${BIN} /bin/${BIN}
+# --- Copy the architecture-specific binary ---
+COPY ${ARCHBIN_PATH}/${TARGETOS}-${TARGETARCH}/${BIN} /usr/local/bin/${BIN}
+
+# --- Expose ports for Kubernetes/OpenShift ---
 EXPOSE ${PORTS}
+
+# --- Container metadata (OCI labels) ---
+LABEL name="${BIN}" \
+      vendor="IBM" \
+      maintainer="ZRL Decentralized Trust Group" \
+      description="Production-grade ${BIN} microservice running on UBI-micro" \
+      summary="Minimal, secure UBI-micro image for ${BIN}" \
+      license="Apache-2.0"
+
+# --- Set runtime entrypoint ---
+ENTRYPOINT ["/usr/local/bin/${BIN}"]