Mark CVE-2018-17187/qpid-proton as unimportant

proton-j is not build into binary packages but the source present.

Later versions removed proton-j from the qpid-proton source and moved it
to a separate upstream source git repository not present in Debian.