Add support for license acknowledgements

[stevespringett]

CycloneDX should support both declared and concluded licenses. Currently, the license acknowledgement is undefined and there is no way to communicate this. Observed licenses are already supported in evidence.licenses, so no need to expand upon that.