devtools: add new SPDX license compliance checker