feat: use readOnlyRootFilesystem (#805)

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>

kured-ds.yaml

@@ -37,6 +37,7 @@ spec:
           imagePullPolicy: IfNotPresent
           securityContext:
             privileged: true # Give permission to nsenter /proc/1/ns/mnt
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 8080
               name: metrics