app-list: Ensure we dedupe app objects
This works around an issue assumed to come from appstream-glib feeding us twice with the same app object by deduplicating app objects with the same address.
Fixes #8 (closed)
Note it doesn't deduplicate the repos (which is likely the source of the duplicated apps), but anyway it doesn't hurt fixing that already.