base: Run as unprivileged builds user

In order to make GitLab CI runners run without --privileged, make flatpak-builder builds run as non-root user. The commit also moves Flatpak remotes to user installation and re-organizes steps for better layer caching.