Read Licese SPDX Expressions from CycloneDX

[chrimih]

Since the CycloneDX specification supports SPDX expressions, Solicitor should read these expressions from an CycloneDX SBOM.

Currently, only the list of licenses are read.

Reference: https://cyclonedx.org/docs/1.4/json/#components_items_licenses_items_expression