Treat CLA specially

[pombredanne]

We likely should not treat a generic-cla as something important.
When a package is only used, a CLA is not relevant
See for instance:
https://github.com/open-telemetry/opentelemetry-swift/blob/main/CONTRIBUTING.md

The same would apply to other related Code of conduct and non-usage related legal documents... these are NOT licenses. And even if we use license detection to find them, they should not be reported as a license

[pombredanne]

See also:

• generic-licenses: Turn generic license rules into separate licenses #2287