add read-only securitycontext to haskell services containers and volume mounts

[amitsagtani97]

Ticket - https://wearezeta.atlassian.net/browse/SQPIT-1552

Checklist

• [ ] Add a new entry in an appropriate subdirectory of changelog.d
• [ ] Read and follow the PR guidelines

[supersven]

I fear there was a misunderstanding regarding geoip:

• As far as I can see, brig does not write to it's volume (only reads the geoip database).
• There is a service that updates the database.

[CLAassistant]

All committers have signed the CLA.