Don't allow Composer plugin tbachert/spi to run by default

[stephen-cox]

This plugin is required by Open Telemetry which is included with druapl-dev, but only needed if testing with Open Telemetry data. See https://www.drupal.org/node/3492353

Let's block it by default.

For another approach see: localgovdrupal/localgov#803