ci: pr-cve-check workflow incorrectly treats .inc files as buildable recipes

[rpcme]

Problem

The pr-cve-check workflow detects changed files and attempts to run bitbake -c sbom_cve_check_recipe on them. It incorrectly includes .inc files (e.g., aws-iot-device-sdk-cpp-v2-version.inc) in the recipe list, causing:

ERROR: Nothing PROVIDES 'aws-iot-device-sdk-cpp-v2-version'. Close matches:
  aws-iot-device-sdk-cpp-v2

Reproduction

See PR #15777 — the only content change is to aws-iot-device-sdk-cpp-v2-version.inc, and the CVE check fails trying to build it as a recipe.

Expected behavior

The workflow should filter out .inc files from the changed recipe list, only passing actual .bb files to bitbake.

Suggested fix

In the Get changed recipes step of the CVE check workflow, add a filter like:

grep '\.bb$'

to exclude .inc, .bbappend, and other non-recipe files.