Including CMD_PREFIX here causes problems for any subcommand that reads `$FLATPAK` to find the binary path, since then it's no longer actually a binary path. Instead, we can use a wrapper script, which will then run flatpak w/ the prefix itself.
