composer.json: Use SPDX license identifier