Ignore fixtures and test dependencies

While we remove unwanted SBOM reports in the after_script of the generate sbom job, these reports are still being generated when running Gemnasium as a fallback (when reports are not available). Not only does this consume resources and time, but it also make the license fetching process slower and messy because we report irrelevant missing licenses.