Generate SPDX files

[david-a-wheeler]

Generate SPDX.

One solution is to use spdx-sbom-generator https://github.com/spdx/spdx-sbom-generator