all: exclude traversing the "*/testutil/*" directory from checks

[odeke-em]

Summary

Noticed in the security alerts that we have so many reports for code inside */testutil/* like

but really that code shouldn't block builds given that it is just test code

Just an FYI for @kirbyquerby @willpoint @elias-orijtech