Add firejail (required for command sandboxing)

Author: krishnans2006

Dockerfile

@@ -1,7 +1,5 @@
 FROM python:3.11-slim-bookworm
 
-RUN apt-get update -y && apt-get install -y --no-install-recommends curl
-
 # reduce the number of celery warnings
 RUN useradd celery
 
@@ -10,6 +8,8 @@ ENV PYTHONUNBUFFERED=1 PIPENV_VENV_IN_PROJECT=1
 COPY Pipfile .
 COPY Pipfile.lock .
 
+RUN apt-get update -y && apt-get install -y --no-install-recommends curl firejail
+
 RUN pip install pipenv && \
   pipenv install --dev