Add licenses to the group level dependency list export

What does this MR do and why?

This change adds the licenses data to the Group level Dependency List export.

#426478 (closed)

Screenshots or screen recordings

Before:

[
  {
    "name": "activesupport",
    "packager": "bundler",
    "version": "7.0.3.1",
    "location": {
      "blob_path": null,
      "path": null,
      "top_level": false,
      "ancestors": null
    }
  }
]

After:

[
  {
    "name": "activesupport",
    "packager": "bundler",
    "version": "7.0.3.1",
    "licenses": [
      {
        "spdx_identifier": "MIT",
        "name": "MIT License",
        "url": "https://spdx.org/licenses/MIT.html"
      }
    ],
    "location": {
      "blob_path": null,
      "path": null,
      "top_level": false,
      "ancestors": null
    }
  }
]

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.