- Install gosu in hermes image so run-multi-gateways.sh can drop privileges when USER hermes is set at the end of the Dockerfile. - Add openssh-client + ssh-keyscan to the openconcho-builder stage so SSH host key verification passes during the first Gitea clone.