docker dockerfile cmd vs entrypoint