Let Thunderbird open files via desktop portals

Currently we allow Thunderbird read-write access to $HOME (with some exceptions) to allow it to open files for sending/receiving attachments. We should instead disallow this by default and only allow access to files chosen by the user via the document portal.

This will be obsoleted by #21374 which impacts the cost/benefit of this work.