[CodeQL] Don't scan `e2e/` as it is not distributed

[ozyx]

Summary

Right now we are getting a lot of false positive security alerts due to versions of dependencies within e2e/, which is not packaged into our distributable. We should skip scanning it since this is not a "functional" area of the code