docs: do not create CVE.html when processing doc for release CVE.html is only needed for non-release docs. Since the doc directory is only processed directly for releases, the CVE.txt file should be ignored/excluded.