Permissions for a utility snap to read/write user files

The idea is to bundle the assets in the snap, and then let the executable load them at runtime from $SNAP/path/to/assets. The assets path is typically set using an environment variable, but if the executable can’t be patched or configured to look for resource files inside the snap directory you can use layouts to map them to a different location in the filesystem.