How to structure RUN instructions — chain update with install, clean up in-layer, avoid over-chaining, and keep the build cache working for you.