Perform License Resolution On Name Field During SBOM Import

[aravindparappil46]

Description

On import of SBOMs with SPDX compliant license ID in the name field and with no id field, license resolution should first occur against standard licenses.

If none found, only then should license resolution occur against custom licenses.

Addressed Issue

Fixes #3433

Additional Details

On SBOM import, if the license candidate/license option did not have an id field and only a name field, we were assuming the license to lookup would be a custom license (whereas in fact, the name field could contain a standard license ID and not a custom one)

In this change, during BOM upload, if license does not have an id, then we call qm.getLicense() with the name field first. If it returns no results, only then do we call qm.getCustomLicense()

Sample SBOM used for testing is attached to this PR:
tiny-bom.json

Please do let me know if I am doing anything blatantly wrong :)

Checklist

• I have read and understand the contributing guidelines
• This PR fixes a defect, and I have provided tests to verify that the fix is effective
• This PR implements an enhancement, and I have provided tests to verify that it works as intended
• This PR introduces changes to the database model, and I have added corresponding update logic
• This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

[codacy-production]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.05% (target: -1.00%)	✅ 70.00% (target: 70.00%)

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (2182706)	21514	15924	74.02%
Head commit (b89f8c6)	21523 (+9)	15942 (+18)	74.07% (+0.05%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#3555)	10	7	70.00%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

_{You may notice some variations in coverage metrics with the latest Coverage engine update. For more details, visit the documentation}

[nscuro]

Great first PR @aravindparappil46, thank you!