Add support for SPDX expression resolution

SPDX Tools was removed from Java Core v3.0.0 due to introducing a lot of unnecessary dependencies and requiring Internet access by default (could be disabled via system property: SPDXParser.OnlyUseLocalLicenses).

Since the removal of SPDX Tools, CycloneDX Java Core had to implement the SPDX license list (json) as well as license text from the SPDX project. This enhancement request is to add support for SPDX license expressions, which is no longer possible in v3.0.0, back into this library.

There's a potential to introduce a standalone library that provides all of this functionality - similar to SPDX Tools - but without all the extras that go along with it. Possibly similar to https://github.com/nexB/license-expression

The issue does not name any files, tests, or entry points. Start by reviewing the current SPDX license-list and license-text implementation in CycloneDX Java Core, then compare the required expression behavior with SPDX Tools or license-expression. Done means SPDX license expressions resolve without restoring the removed unnecessary dependencies or default Internet access.

Written by the indexing model from the issue text.