As authentication/authorization is usually highly environment specific HiveMQ does not come with any mechanism for this out of the box. For auth purposes extensions to the HiveMQ system are necessary.
As you already have a custom Docker file, you just need to drop it in during your docker build. I would suggest mapping the credentials file to a volume.
All the best
Georg
Edit: I would suggest removing the HiveMQ Allow All Extension from your container as well. While this is not mandatory for the RBAC extension to work, it is a good precaution and and a cleaner setup this way.