chore: fix osv license scan config and add license override

[shahar-h]

What this PR does / why we need it:

• Fix file name in --config arg - I used yaml instead of toml by mistake.
• Comment out vulnerability.ignore flag which was added here since it's only supported in osv-scanner v1.9.1. The current osv-scanner-action is v1.9.0. I opened an issue to release a new version.
• Add license override for golang.org/x/crypto since it doesn't appear yet on deps.dev.
  Opened an issue.

BTW the workflow didn't fail because 127 status code is redirected to 0 when running inside osv-scanner container.
I opened an issue a long time ago.

Release Notes: No

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 66.25%. Comparing base (9b60a67) to head (6b7d68c).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4906   +/-   ##
=======================================
  Coverage   66.24%   66.25%           
=======================================
  Files         209      209           
  Lines       31922    31922           
=======================================
+ Hits        21148    21151    +3     
+ Misses       9523     9522    -1     
+ Partials     1251     1249    -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[shahar-h]

[shahar-h]

/retest

[guydc]

LGTM, thanks!