How should Dockerfile best practices be implemented for production?

Order instructions to maximize cache reuse, use multi-stage builds, copy only required artifacts, set a non-root USER, add health checks when useful, and keep secrets out of build layers.