buildifier moves licenses() and distribs() from mainline to the package() declaration

[aiuto]

We should not do this.

• distribs() is no-op in bazel and being completely remove soon.
• licenses() is a no-op in bazel, but is still widely seen, even if vestigial

Moving licenses to package() creates needless churn for reviewers, and can break existing tooling around finding licenses as a distinct tool

@teeler