Skip symlinks when creating SBOM for source tarball

[hugovk]

Building an SBOM for artifact 'Python-3.14.0a7.tgz'
💥 Building SBOM artifacts
Traceback (most recent call last):
File "/Users/hugo/github/release-tools/run_release.py", line 1388, in <module>
main()
File "/Users/hugo/github/release-tools/run_release.py", line 1384, in main
automata.run()
File "/Users/hugo/github/release-tools/run_release.py", line 248, in runraise e fromNone
File "/Users/hugo/github/release-tools/run_release.py", line 245, in runself.current_task(self.db)
File "/Users/hugo/github/release-tools/release.py", line 126, in __call__returngetattr(self, "function")(db)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/hugo/github/release-tools/run_release.py", line 656, in build_sbom_artifacts
sbom_data = sbom.create_sbom_for_source_tarball(tarball_path)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/hugo/github/release-tools/sbom.py", line 616, in create_sbom_for_source_tarballassert member.isfile() and member.name.startswith(f"Python-{cpython_version}/")
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
AssertionError

That's because Python-3.14.0a7/Misc/mypy/_colorize.py is a symlink and member.isfile() is False.

Because https://github.com/python/cpython/tree/main/Misc/mypy now has symlinks, added in python/cpython#131509.

Let's skip them.

[sethmlarson]

LGTM!