Run SPDX check in CI

[dehanj]

Today in ci.yaml we have a comment

      # TODO? first deal with hw/boards/ and hw/production_test/
      # - name: check for SPDX tags
      #   run: ./LICENSES/spdx-ensure

adding this issue so we don't forget to fix this.