Switch license handling to SPDX

[SPDX](https://spdx.org/licenses/) has become the de-facto standard for describing licenses.
We should aim to use this over our own list: https://dub.pm/package-format-json.html#licenses