v0.4.4 Deployment user

Deployment commands and pre-commands can run under a configured username instead of the account that starts the service. Startup now warns when the service is run without a deployment username as root, or when run as a non-root user, and asks for confirmation.