Add dependency license scanning to CI

[Akatenvictor]

Problem / Context

Building on the manual license audit, add an automated CI check that fails on a newly introduced incompatible-license dependency.

Proposed approach

Add a CI step running a license checker against package-lock.json with an allowlist of approved licenses.

Acceptance criteria

• CI step added and passing on current dependencies
• A deliberately incompatible test dependency fails the check in a trial run

[drips-wave]

@Akatenvictor This issue could not be added to the Stellar Wave Program because the per-repo points budget would be exceeded (25000 / 25000 points already used). The label has been automatically removed.

The budget resets at the end of each Wave. You can review the remaining budget for your repos on the Orgs & Repos page.

ℹ️ Learn more about points budgets

[drips-wave]

@Akatenvictor This issue could not be added to the Stellar Wave Program because the per-repo points budget would be exceeded (25000 / 25000 points already used). The label has been automatically removed.

The budget resets at the end of each Wave. You can review the remaining budget for your repos on the Orgs & Repos page.

ℹ️ Learn more about points budgets

[drips-wave]

@Akatenvictor This issue could not be added to the Stellar Wave Program because the per-repo points budget would be exceeded (25000 / 25000 points already used). The label has been automatically removed.

The budget resets at the end of each Wave. You can review the remaining budget for your repos on the Orgs & Repos page.

ℹ️ Learn more about points budgets