package.json: use SPDX license identfier

[GitMensch]

fixing package.json according to NPM docs and LICENSE, fixing npm warnings

this will also lead to the correct license be shown in extension marketplaces

[edwinhuish]

thank you