Configure CG to ignore helloworld. (#2224)

This PR configures Component Governance to ignore the helloworld package, which is an internal template that is not used.

Author: hansenyy

.ado/publish.yml

@@ -38,15 +38,17 @@ extends:
       image: windows-latest
       os: windows
     sdl:
+      componentgovernance:
+        ignoreDirectories: $(Build.SourcesDirectory)/packages/helloworld
+      credscan:
+        suppressionsFile: .ado/CredScanSuppressions.json
       eslint:
         configuration: 'recommended'
         parser: '@typescript-eslint/parser'
         parserOptions: ''
         enableExclusions: true
         # Justification: js files in this repo are flow files. the built-in eslint does not support this. Adding a separate step to run the sdl rules for flow files.
         exclusionPatterns: '**/*.js'
-      credscan:
-          suppressionsFile: .ado/CredScanSuppressions.json
     stages:
       - stage: main
         jobs: