Fix order of curl installation (#228)

## Motivation

This didn't work because we weren't running as the right user.

## Merge Checklist

- [x] PR title adheres to the [conventional
commits](https://www.conventionalcommits.org/en/v1.0.0/) standard
- [ ] PR has a changeset
- [ ] PR includes documentation if necessary
- [x] All commits have been signed

Dockerfile.relay

@@ -62,6 +62,8 @@ RUN rm -rf node_modules && yarn install --production --ignore-scripts --prefer-o
 
 FROM node:20.2-alpine as app
 
+RUN apk add --no-cache curl # For health checks
+
 # Set non-root user and expose ports
 USER node
 
@@ -71,8 +73,6 @@ ENV NODE_ENV production
 RUN mkdir /home/node/app
 WORKDIR /home/node/app
 
-RUN apk add --no-cache curl # For health checks
-
 # Copy results from previous stage.
 # The base image is same as the build stage, so it is safe to copy node_modules over to this stage.
 COPY --chown=node:node --from=prune /home/node/app/out/json/ .