Check that license verification is actually doing the expected

[rockdaboot]

Description

The licenses under LICENSES/ seem to be incomplete.

References
#864 (comment)
#864 (comment)

Expected

• Licenses of all non-Apache2.0 dependencies (direct and indirect) should be stored under LICENSES/.
• The CI should fail if this is not the case
• The CI should fail if any stored license file deviates from the upstream license

Required actions

• Investigate if make verify-licenses works as expected
• If it does, investigate why the CI doesn't fail
• If it does not, fix it

[mikeblum]

Hi! Could I pick this up?

[pellared]

@mikeblum, I assigned you.