Make it more obvious how to run a node image as non-root

[rugk]

Description

This IMHO highlights a critical part.

Motivation and Context

Fixes #2287 (see there for more reasoning)

IMHO, you may also link the best practices on https://hub.docker.com/_/node/#how-to-use-this-image directly, to save some more clicks and hopefully make more people find the information about non-root users.

I personally have not found that information as I searched for best on docker-hub and for root there and this Readme. (I missed searching for best again so maybe this helps.)

Testing Details

Example Output(if appropriate)

Types of changes

• Documentation
• Version change (Update, remove or add more Node.js versions)
• Variant change (Update, remove or add more variants, or versions of variants)
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Other (none of the above)

Checklist

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have read the CONTRIBUTING.md document.
• All new and existing tests passed.

[Copilot]

Pull Request Overview

This PR updates the README to better highlight security best practices, specifically drawing attention to the non-root user guidance in the Best Practices documentation.

• Adds a security-focused note to make non-root user information more discoverable
• Links directly to the specific section about non-root users in the best practices guide

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Corrected the phrase 'how to run use a non-root user' to 'how to use a non-root user' by removing the redundant 'run' word.

Suggested change

	This includes **security relevant** information e.g. on [how to run use a non-root user](./docs/BestPractices.md#non-root-user).
	This includes **security relevant** information e.g. on [how to use a non-root user](./docs/BestPractices.md#non-root-user).