Add ignored_vulnerabilities field on the Project configuration #1271

[tdruez]

This PR extends the scancode-config.yml file to selectively ignore vulnerabilities.
The new ignored_vulnerabilities field is a list of ignored vulnerabilities, one per line.
This can be a a VCID, CVE or any vulnerability alias supported by VulnerableCode.

For example:

    ignored_vulnerabilities:
     - VCID-q4q6-yfng-aaag
     - CVE-2024-27351
     - GHSA-vm8q-m57g-pff3

For now, the behavior is to ignore these entirely when doing a vulnerability scan.
In the future, this will be enhanced to provide extra details such as a reason why this is
ignored and serve as a proper input to a vulnerability disclosure or VEX report.

• Reference: Extend scancode-config.yml to ignore some vulnerabilities #1271

[pombredanne]

This looks great! thank you ++