Comment 2 for bug 1781267

I thought we'd explicitly said the license needed to be SPDX 2.something, and that bumping the spdx version was a when-and-if discussion we needed to have at some point.

I also thought we'd agreed to use the exact same validation code on the store and in snapd.