With BuildKit's secrets,

# create user
RUN --mount=type=secret,id=user_uid \
    --mount=type=secret,id=user_gid \
    GROUP_ID=$(cat /run/secrets/user_gid) \
    USER_ID=$(cat /run/secrets/user_uid) \
    # ...