Add missing @types for spdx deps

[JamieMagee]

spdx-expression-parse, spdx-license-ids, and spdx-satisfies were missing their @types packages. Adds them as devDependencies.

[qtomlinson]

Thanks for the prep work! One thing to keep in mind for the index.js → index.ts conversion: these @types packages describe the upstream APIs, but we use ClearlyDefined forks (clearlydefined/spdx-expression-parse.js and clearlydefined/spdx-satisfies.js) that diverge from them. We may need module declaration overrides or local augmentations when we actually convert index.js to TypeScript.

[JamieMagee]

Yeah, I am aware of the forks. The @types/ packages aren't enforcing anything at the moment, as index.js hasn't been converted to TypeScript. I'll cross that bridge once I figure out what to do with this library as part of the TypeScript migration.