Exclude unittests from SAST since it raises unnecessary errors.

Bandit reports for example using the "assert" statement as vulnerability. Inside of unit tests this cannot be circumvented (and should not be).