Adding SPDX-License-Identifiers to headers

[illuusio]

Having SPDX-License-Identifier in source comments would be good uplift for maintaining SBOM out of libcbor.

If it's ok I can add them