flatpak: make sure we look up the correct resource
We are using the appstream id as the app identifier, not the flatpak's. This makes sure we don't create two very-similar-but-not-quite resources.
I'd like to cherry-pick to Plasma 5.26, a bit of testing would be welcome.