Consider moving licenses to SPDX 3.0 compliant short identifiers

[chadlwilson]

Currently the licenses enumeration has licenses such as LGPL-3.0 which are SPDX-deprecated due to being ambiguous.

https://github.com/OWASP/nest-schema/blob/main/docs/project.md#10-property-owasp-project--license

I'm not sure the process for schema agreement and evolution, but given I believe it's rathere new, perhaps you'd make lives easier for future if you use non-deprecated SPDX identifiers (i.e 3.0 compliant).

https://spdx.org/licenses/

Deprecated:

• AGPL-3.0 -> AGPL-3.0-only
• GPL-2.0 -> GPL-2.0-only
• GPL-3.0 -> GPL-3.0-only
• LGPL-2.1 -> LGPL-2.1-only
• LGPL-3.0 -> LGPL-3.0-only

You may also need to add the -or-later variants.