run as root group (#680)

# Description

run as root group instead of 1000.

Subset of tests on open shift:

```
--- PASS: kuttl (585.49s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/smoke_zookeeper-3.8.0-stackable0.0.0-dev_use-server-tls-false_use-client-auth-tls-false (67.56s)
        --- PASS: kuttl/harness/cluster-operation_zookeeper-latest-3.8.0-stackable0.0.0-dev (80.69s)
        --- PASS: kuttl/harness/delete-rolegroup_zookeeper-3.8.0-stackable0.0.0-dev (70.96s)
        --- PASS: kuttl/harness/smoke_zookeeper-3.8.0-stackable0.0.0-dev_use-server-tls-true_use-client-auth-tls-true (89.60s)
        --- PASS: kuttl/harness/logging_zookeeper-3.8.0-stackable0.0.0-dev (70.75s)
        --- PASS: kuttl/harness/znode_zookeeper-latest-3.8.0-stackable0.0.0-dev (30.45s)
        --- PASS: kuttl/harness/smoke_zookeeper-3.8.0-stackable0.0.0-dev_use-server-tls-false_use-client-auth-tls-true (85.17s)
        --- PASS: kuttl/harness/smoke_zookeeper-3.8.0-stackable0.0.0-dev_use-server-tls-true_use-client-auth-tls-false (79.45s)
PASS

```

Author: adwk67

CHANGELOG.md

@@ -14,12 +14,14 @@ All notable changes to this project will be documented in this file.
 - Operator-rs: `0.40.2` -> `0.41.0` ([#673]).
 - Use 0.0.0-dev product images for testing ([#674])
 - Use testing-tools 0.2.0 ([#674])
+- Run as root group ([#680])
 
 [#672]: https://github.com/stackabletech/zookeeper-operator/pull/672
 [#673]: https://github.com/stackabletech/zookeeper-operator/pull/673
 [#674]: https://github.com/stackabletech/zookeeper-operator/pull/674
 [#675]: https://github.com/stackabletech/zookeeper-operator/pull/675
 [#676]: https://github.com/stackabletech/zookeeper-operator/pull/676
+[#680]: https://github.com/stackabletech/zookeeper-operator/pull/680
 
 ## [23.4.0] - 2023-04-17
 

rust/operator-binary/src/zk_controller.rs

@@ -64,7 +64,7 @@ use std::{
 use strum::{EnumDiscriminants, IntoStaticStr};
 
 pub const ZK_CONTROLLER_NAME: &str = "zookeepercluster";
-
+pub const ZK_UID: i64 = 1000;
 pub struct Ctx {
     pub client: stackable_operator::client::Client,
     pub product_config: ProductConfigManager,
@@ -748,8 +748,8 @@ fn build_server_rolegroup_statefulset(
             ..Volume::default()
         })
         .security_context(PodSecurityContext {
-            run_as_user: Some(1000),
-            run_as_group: Some(1000),
+            run_as_user: Some(ZK_UID),
+            run_as_group: Some(0),
             fs_group: Some(1000),
             ..PodSecurityContext::default()
         })