An allow-list for licenses of dependencies and check that on CI

[akhi3030]

We have https://github.com/near/nearcore/blob/master/ATTRIBUTIONS.md for dependencies, but I don't think that's super up-to-date.

I think it'd be great to have an allow-list for licenses of deps and check that on CI. We might already be doing that somewhere, but I don't think so. I don't think thats super important though.

Here's how we do this for RA:

https://github.com/rust-lang/rust-analyzer/blob/a0ab61fb6c1b0fa2bdcd10cdba17b444941c073e/crates/rust-analyzer/tests/slow-tests/tidy.rs#L176

Originally posted by @matklad in https://github.com/near/nearcore/issues/7729#issuecomment-1277650742