Excluding results form test code

[GrosQuildu]

Usually our rules should not produce findings in testing code. We have to check if/how official codeql rules limit results to only real code, and do the same. Otherwise we may come up with some set of test heuristics we can apply for all rules.