flatpak: Bump openexr from v2.3.0 to v2.5.7

This required subtle changes to the manifest because the upstream project no longer publishes separate tarballs with different parts of the project.