feat: Updating REUSE configuration to properly support dependancies (#122)

- Updated REUSE configuration to newest format.
- Added rule to include additional copyright information pointing to
license.txt for external dependencies

SPDX result example:
```
FileName: ./typescript/packages/kustomize/version-bump/dist/index.d.ts
SPDXID: SPDXRef-f08b6014a19d49b5a22b772410b4280f
FileChecksum: SHA1: b878c11a77128e74c3cf15c93ef2ceddf2aa0b38
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2025 SAP SE or an SAP affiliate company and blueprint-workflows contributors
SPDX-FileCopyrightText: Additional copyright holders of dependencies used are contained in licenses.txt</text>

FileName: ./typescript/packages/kustomize/version-bump/dist/index.d.ts.map
SPDXID: SPDXRef-94493141d8d859676733523c712f90d5
FileChecksum: SHA1: 8deaf35b5695418b391324a8a6071a6249b4c751
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2025 SAP SE or an SAP affiliate company and blueprint-workflows contributors
SPDX-FileCopyrightText: Additional copyright holders of dependencies used are contained in licenses.txt</text>

FileName: ./typescript/packages/kustomize/version-bump/dist/index.js
SPDXID: SPDXRef-8d14ac88351085e715d22ae2ac58658b
FileChecksum: SHA1: 672d2f06ca48c9ee5ec192090ee5d5710af4f53c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>Copyright (C) 2011 Einar Otto Stangvik <einaros@gmail.com>
Copyright (C) 2013 Arnout Kazemier and contributors
Copyright (C) 2016 Luigi Pinca and contributors
SPDX-FileCopyrightText: 2025 SAP SE or an SAP affiliate company and blueprint-workflows contributors
SPDX-FileCopyrightText: Additional copyright holders of dependencies used are contained in licenses.txt
Copyright Brian White. All rights reserved.
Copyright Joyent, Inc. and other Node contributors. All rights reserved.</text>
```

Co-authored-by: Steffen <5519671+sk31337@users.noreply.github.com>

Author: wchomik

.reuse/dep5

@@ -0,0 +1,20 @@
+version = 1
+SPDX-PackageName = "blueprint-workflows"
+SPDX-PackageSupplier = "ospo@sap.com"
+SPDX-PackageDownloadLocation = "https://github.com/openmcp-project/blueprint-workflows"
+SPDX-PackageComment = "The code in this project may include calls to APIs (\"API Calls\") of\n SAP or third-party products or services developed outside of this project\n (\"External Products\").\n \"APIs\" means application programming interfaces, as well as their respective\n specifications and implementing code that allows software to communicate with\n other software.\n API Calls to External Products are not licensed under the open source license\n that governs this project. The use of such API Calls and related External\n Products are subject to applicable additional agreements with the relevant\n provider of the External Products. In no event shall the open source license\n that governs this project grant any rights in or to any External Products,or\n alter, expand or supersede any terms of the applicable additional agreements.\n If you have a valid license agreement with SAP for the use of a particular SAP\n External Product, then you may make use of any API Calls included in this\n project's code for that SAP External Product, subject to the terms of such\n license agreement. If you do not have a valid license agreement for the use of\n a particular SAP External Product, then you may only make use of any API Calls\n in this project for that SAP External Product for your internal, non-productive\n and non-commercial test and evaluation of such API Calls. Nothing herein grants\n you any rights to use or access any SAP External Product, or provide any third\n parties the right to use of access any SAP External Product, through API Calls."
+
+[[annotations]]
+path = "**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2025 SAP SE or an SAP affiliate company and blueprint-workflows contributors"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "**/dist/*"
+precedence = "aggregate"
+SPDX-FileCopyrightText = [
+    "2025 SAP SE or an SAP affiliate company and blueprint-workflows contributors",
+    "Additional copyright holders of dependencies used are contained in licenses.txt"
+]
+SPDX-License-Identifier = "Apache-2.0"