Properly quote desktop entry Exec arguments

This matches what happens in Flatpak and in xdg-desktop-portal-gnome.
First parse the argv so it's unquoted then quote any arguments that need
it. Don't do so in the background portal since the backend handles it.

Also don't allow Flatpaks to use the --file-forwarding argument for
"flatpak run".