fix: updates sonar job so it does not run on dependabot PRs

[jpower432]

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• All new and existing tests passed.
• All commits are signed-off.

Summary

Updates sonar CI to ensure it does not run when the PR is from Dependabot

Key links:

• Sonar coverage

[jpower432]

@vikas-agarwal76 I missed this originally. Same issue as oscal-compass/compliance-trestle#1656.

[vikas-agarwal76]

LGTM