chore: harden supersync docker-compose

docker-compose.yaml

@@ -26,6 +26,10 @@ services:
       dockerfile: packages/super-sync-server/Dockerfile.test
     ports:
       - '1900:1900'
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
     depends_on:
       db:
         condition: service_healthy