ORT: Review unapproved/unknown licenses

[ikolomi]

Description

The current ORT validation runs produce unknown/unapproved licenses, for example, this run:
https://github.com/valkey-io/valkey-glide/actions/runs/12060233555/job/33630281736

produced the following list:

Package_name: Crate::option-ext:0.2.0, Language: Python, License: MPL-2.0
Package_name: Crate::ring:0.17.8, Language: Python, License: NOASSERTION
Package_name: Crate::unicode-ident:1.0.14, Language: Python, License: (Apache-2.0 OR MIT) AND Unicode-3.0
Package_name: PyPI::pathspec:0.12.1, Language: Python, License: MPL-2.0
Package_name: PyPI::pathspec:0.12.1, Language: Python, License: MPL-2.0
Package_name: PyPI::pytest-metadata:3.1.1, Language: Python, License: MPL-2.0
Package_name: PyPI::pytest-metadata:3.1.1, Language: Python, License: MPL-2.0
Package_name: Crate::option-ext:0.2.0, Language: Node, License: MPL-2.0
Package_name: Crate::ring:0.17.8, Language: Node, License: NOASSERTION
Package_name: Crate::unicode-ident:1.0.14, Language: Node, License: (Apache-2.0 OR MIT) AND Unicode-3.0
Package_name: NPM::pause-stream:0.0.11, Language: Node, License: Apache-2.0 AND MIT
Package_name: Crate::option-ext:0.2.0, Language: Java, License: MPL-2.0
Package_name: Crate::ring:0.17.8, Language: Java, License: NOASSERTION
Package_name: Crate::unicode-ident:1.0.14, Language: Java, License: (Apache-2.0 OR MIT) AND Unicode-3.0
Package_name: Maven:org.json:json:20231013, Language: Java, License: LicenseRef-scancode-public-domain-disclaimer
Package_name: Maven:org.json:json:20231013, Language: Java, License: LicenseRef-scancode-public-domain-disclaimer
Package_name: Crate::option-ext:0.2.0, Language: Rust, License: MPL-2.0
Package_name: Crate::ring:0.17.8, Language: Rust, License: NOASSERTION
Package_name: Crate::unicode-ident:1.0.14, Language: Rust, License: (Apache-2.0 OR MIT) AND Unicode-3.0

This breaks AWS AppSec requirements, we have to deal with it by either extended the set of approved licenses or removing the packages

Checklist

• Task item 1
• Task item 2
• Task item 3

Additional Notes

No response

[BoazBD]

Most of the work is completed in #2890.
The remaining tasks depend on Viral (Senior Open Source Engineer) to approve or reject some of the packages we are using.

As a result, the estimated completion time is between 1 to 5 days, depending on his response.

[BoazBD]

Unapproved/unknown licenses list is now empty.