Treat CLA specially

We likely should not treat a `generic-cla` as something important.
When a package is only used, a CLA is not relevant
See for instance:
https://github.com/open-telemetry/opentelemetry-swift/blob/main/CONTRIBUTING.md

The same would apply to other related Code of conduct and non-usage related legal documents... these are NOT licenses. And even if we use license detection to find them, they should not be reported as a license