ci(gh-action): add Apache RAT & package license checker workflow

[erisu]

Platforms affected

n/a

Motivation and Context

check license header and package dependency licenses during commit and pr submission

Description

create release audit workflow

Testing

n/a

Checklist

• [ ] I've run the tests to see all new and existing tests pass
• [ ] I added automated test coverage as appropriate for this change
• [ ] Commit is prefixed with (platform) if this change only applies to one platform (e.g. (android))
• [ ] If this Pull Request resolves an issue, I linked to the issue in the text above (and used the correct keyword to close issues using keywords)
• [ ] I've updated the documentation if necessary