perf: precompute SPDX ID Set for O(1) license validation lookups

[Copilot]

ALL_SPDX_IDS.includes(license) in the superRefine callback was doing a linear scan over thousands of SPDX entries on every validation call — which fires on each keystroke via isValid()/safeParse.

Changes

• src/schemas.ts: Precompute SPDX_ID_SET = new Set(ALL_SPDX_IDS) once at module load; replace Array.includes() with Set.has() in the refinement loop.

// Before
!ALL_SPDX_IDS.includes(license)

// After
const SPDX_ID_SET = new Set(ALL_SPDX_IDS);
// ...
!SPDX_ID_SET.has(license)

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.