ci: exclude pinned fonts from Sonar scan

sonar-project.properties

@@ -1,6 +1,9 @@
 sonar.projectKey=storytold_figcraft
 sonar.organization=storytold
 
+# Pinned integration-test fonts are data, not source code for analysis.
+sonar.exclusions=craft-fonts/**
+
 # S4790 (weak hash): a .fig file names each image by the SHA-1 of its bytes (20 bytes, the only
 # length readers accept). It is an identifier the format fixes, not a security choice.
 sonar.issue.ignore.multicriteria=fig_image_sha1