Apparently wp-cli has no yml option for --allow-root. However, I think commands without the "allow-root" flag can easily be achieved using aliases.
I suggest adding the following to docker-entrypoint.sh:
alias wp="/usr/bin/wp --allow-root"
What do you think?