ci: Only run license_scanning when dependency files are touched

What does this MR do and why?

I'm not sure there's a need to run this job when dependency files aren't touched?

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.