Add licence string normalization logic

**What would you like to be added**:
Eg my image has jars or packages which have licences like

**Why is this needed**:
Can we normalize these to known supported licences
eg **The Apache Software License, Version 2.0** is same as **Apache-2.0**

**Additional context**:

The issue does not name files, tests, or an entry point. Start by locating where grant parses and compares license names, then review how supported licenses are represented; done means equivalent names such as “The Apache Software License, Version 2.0” resolve to the canonical Apache-2.0 identifier and the behavior is covered by tests.

Written by the indexing model from the issue text.