* linux-flatpak: slim down the image * meta: conform to new Dockerfile standard * meta: use regular user as possible