Inside a flatpak, XDG_DATA_HOME points at our own private data, so the
user-installation scan (and override writes) missed every user-installed
app, including FlatKontrol itself. Use HOST_XDG_DATA_HOME and the host
/etc path when running in a sandbox, matching Flatseal.
Adds a dedicated repo-signing public key and signs the exported repo,
static deltas, and single-file bundle. The public key is embedded in the
generated .flatpakrepo so installs no longer need --no-gpg-verify.
A KDE/Qt application to review and edit the permissions of installed
Flatpak applications, editing the same override files as Flatpak itself.
Covers shared subsystems, sockets, devices, features, filesystem access,
persistent paths, environment variables, D-Bus policies and portals.
Includes a Flatpak manifest and a CI workflow that publishes a bundle and
a hosted Flatpak repository on tagged releases.