generate_bom: Fix TypeErrors with missing copyright reports

It's entirely possible for the primary report path to be None if it
wasn't found, in which case we shouldn't try loading it.

https://phabricator.apertis.org/T8554



Signed-off-by: Ryan Gonzalez <ryan.gonzalez@collabora.com>