Clarify elkjs package approval
What does this MR do and why?
This follows-up on some discussions in !119223 (comment 1375279798). The dependency decision for the elkjs
package needs to refer to the legal issue where the approval was given. This also specify the actual version that was approved in case a newer version of the package were to introduce a new license as well.