generate_bom: Fix TypeErrors with missing copyright reports

It's entirely possible for the primary report path to be None if it wasn't found, in which case we shouldn't try loading it.

https://phabricator.apertis.org/T8554

Signed-off-by: Ryan Gonzalez ryan.gonzalez@collabora.com