fix(sbom): use NOASSERTION for licenses fields in SPDX formats

[DmitriyLewen]

Description

See more in #7397

Before:

      "licenseConcluded": "NONE",
      "licenseDeclared": "NONE",

After:

      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",

Related issues

• Close Unknown license and download location information should be NOASSERTION instead of NONE in SPDX #7402

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).