Warn when updates would change flatpak sandbox permissions

### Problem

If you have automatic updates enabled, you may install an app after consenting to one set of permissions and then it could get an update that completely changes those permissions. This is especially problematic in alt stores where there is only an initial review such as Flathub

### Proposal

If an app update would change the kinds of sandbox permissions you've previously agreed to, we should:

1. Not install that update automatically
2. Throw a notifcation that some updates require you to review/accept new permissions
3. Have some kind of nice before/after permission comparison view thing when you go to update

### Prior Art (Optional)

_No response_