Fixes https://github.com/fwupd/fwupd/issues/3464
Previously, the various install paths were obtained using get_option as needed. This patch unifies the directory selection inside the top-level meson file as requested in https://github.com/hughsie/colord/pull/62.
This runs a script inside the firmware archive to generate firmware specific to the machine. This uses bubblewrap to protect the local machine.