ci-package-builder: Actually enforce again the license blocklist

When hardcoding the license blocklist in commit c0f71d09 I forgot the tiny detail of actually pushing it to dotenv so it could be seen by the scanning jobs. This means that the blocklist has not been enforced at all since then.