Allowing deviations from 2.2 to allow for 2.3 SPDX Light.md

[Jimmy-ahlberg]

Solving for the inconsistency in 3.4 where we are referring to v2.3 due to the update to SPDX light to conform to NTIA requirements.

[vargenau]

I would not speak about SPDX Light in our document. We have specified the mandatory elements differently than SPDX Light.