Dockerfile Lint Helper

Scan a Dockerfile for common smells — latest tag, no USER, ADD for URLs, secrets in RUN, missing HEALTHCHECK, and more.