fix: ignore bogus static-analysis output

Previously clang-tidy would complain about system headers, for example: /usr/include/qt5/QtCore/qtimer.h

With this change the compile_commands.json file is used to detect such false positives and disregard them when writing out the analysis report