graphics/open{exr,jph}: Mark openjph forbidden, openexr broken.

Reason is we need to backport OpenJPH 0.24.5 or newer first to obtain
security fixes, and OpenEXR cannot currently be built with the older
vulnerable 0.22.0 of OpenJPH although it's fixed on main.

Security: 77bac392-ba98-11f0-aada-f59a8ea34d12
Security: c71a3914-ba96-11f0-aada-f59a8ea34d12