Remove legal-reference from .fossa-yml modules

The reference module was removed in !269 (merged), but the fossa configuration was missed. As a result, the 'fossa-analyze' steps were failing, unable to list dependencies in the non-existent project.