flatpak: Tighten sandbox

- Remove network permission
- Add ipc permission
- Replace broad devices permission with only dri and input permissions
- Make filesystem permissions read-only (:ro)

Author: MateusRodCosta

flatpak/io.github.hedge_dev.unleashedrecomp.json

@@ -5,15 +5,16 @@
   "sdk": "org.freedesktop.Sdk",
   "sdk-extensions" : [ "org.freedesktop.Sdk.Extension.llvm18" ],
   "finish-args": [
-    "--share=network",
+    "--share=ipc",
     "--socket=wayland",
     "--socket=fallback-x11",
     "--socket=pulseaudio",
-    "--device=all",
-    "--filesystem=host",
-    "--filesystem=/media",
-    "--filesystem=/run/media",
-    "--filesystem=/mnt"
+    "--device=dri",
+    "--device=input",
+    "--filesystem=host:ro",
+    "--filesystem=/media:ro",
+    "--filesystem=/run/media:ro",
+    "--filesystem=/mnt:ro"
   ],
   "modules": [
     {