exclude the workspace from defender scanning on windows

The suite spawns ~175 nuclei processes against a ~200MB binary. Defender scans an executable on every launch, which is the leading suspect for windows integration taking 45m10s against 9m52s on ubuntu.

Exclude the workspace, the go directory and the binaries from real-time scanning, windows only.

Part of #7803.