No license information for busybox

**What happened**:
```
$ docker run --rm -v /var/run/docker.sock:/var/run/docker.sock anchore/syft:v1.29.0 busybox -o cyclonedx-json --select-catalogers "-file" > bom.json
[0004] WARN no file catalogers selected but file selection is configured as "owned-by-package" (this may be unintentional)
$ jq '[.components[] | select( .licenses == null)]' bom.json
[
{
"bom-ref": "pkg:generic/busybox@1.37.0?package-id=bb7b412b995ceddf",
"type": "application",
"name": "busybox",
"version": "1.37.0",
"cpe": "cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*",
"purl": "pkg:generic/busybox@1.37.0",
"properties": [
{
"name": "syft:package:foundBy",
"value": "binary-classifier-cataloger"
},
{
"name": "syft:package:type",
"value": "binary"
},
{
"name": "syft:package:metadataType",
"value": "binary-signature"
},
{
"name": "syft:location:0:layerID",
"value": "sha256:65014c70e84b6817fac42bb201ec5c1ea460a8da246cac0e481f5c9a9491eac0"
},
{
"name": "syft:location:0:path",
"value": "/bin/["
}
]
},
{
"bom-ref": "os:busybox@1.37.0",
"type": "operating-system",
"name": "busybox",
"version": "1.37.0",
"description": "BusyBox v1.37.0",
"swid": {
"tagId": "busybox",
"name": "busybox",
"version": "1.37.0"
},
"properties": [
{
"name": "syft:distro:extendedSupport",
"value": "false"
},
{
"name": "syft:distro:id",
"value": "busybox"
},
{
"name": "syft:distro:idLike:0",
"value": "busybox"
},
{
"name": "syft:distro:prettyName",
"value": "BusyBox v1.37.0"
},
{
"name": "syft:distro:versionID",
"value": "1.37.0"
}
]
}
]

```
**What you expected to happen**:
License information is included (GPL-2.0)

Start by reproducing the supplied Syft command against BusyBox and inspect the cataloger and CycloneDX license-generation paths involved in the output. Confirm that the BusyBox package and operating-system entries receive GPL-2.0 license information, then verify the resulting bom.json against the reported missing-license case.

Written by the indexing model from the issue text.