chore: exclude already-scanned file (#1988)

Co-authored-by: Connor Peet <connor@peet.io>

.ci/publish.yml

@@ -24,6 +24,7 @@ extends:
   parameters:
     publishExtension: ${{ parameters.publishExtension }}
     vscePackageArgs: --no-dependencies
+    apiScanExcludes: '**/w32appcontainertokens-*.node'
     cgIgnoreDirectories: 'testdata,demos,.vscode-test,src/test,testWorkspace'
     ${{ if eq(parameters.publishGhRelease, true) }}:
       ghCreateRelease: true