CLSA-2026-1792769794 flatpak: Fix of CVE-2026-97023

CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious ostree commit with "export" as a symlink made the path-based export/bin cleanup delete files at the symlink target...