Change in build 106999 rejected

A change in [build 106999](https://buildbot.flathub.org/#/builders/6/builds/124050) has been reviewed by the Flathub team, and rejected for the following reason:

> According to the project readme https://github.com/scanoss/sbom-workbench/blob/main/COLLAB_WORKSPACE.md#default-workspace, `$HOME/scanoss-workspace` is the default location. If that is the case, please use `--filesystem=~/scanoss-workspace` with `:create` if needed and not entire home directory. If it is needed for additional reasons, please explain them.
## Changes
| Field | Old value | New value |
| --- | --- | --- |
| persistent | ['.pki', '.scanoss', 'scanoss-workspace'] | None |

Start by reviewing build 106999 and the default workspace guidance in COLLAB_WORKSPACE.md. Check the Flatpak permission configuration that produced the rejected persistent paths, then verify that access is limited to ~/scanoss-workspace with creation enabled if needed. Done means the build no longer grants the entire home directory and passes Flathub review.

Written by the indexing model from the issue text.