JS: Exclude patched libraries from `xml-bomb` sink#20048

Napalys wants to merge 4 commits intogithub:maingithub/codeql:mainfrom

Napalys:js/xml_bomb_sinksNapalys/codeql:js/xml_bomb_sinksCopy head branch name to clipboard