fix(license): preserve nested detection expressions for Deno verification

[mstykow]

Summary

• preserve nested match-derived license expressions during detection aggregation and file/output rendering so shared compare-output results no longer collapse MIT AND (Apache-2.0 OR MIT) to MIT
• rerun compare-outputs --profile common for denoland/fresh, oakserver/oak, and denoland/std, then record the verified Deno snapshots in docs/BENCHMARKS.md
• mark scorecard item 27 (Deno) verified and regenerate docs/benchmarks/scan-duration-vs-files.svg

Issues

• Covers: item 27 (Deno) in docs/implementation-plans/package-detection/PARSER_VERIFICATION_SCORECARD.md
• Closes:

Scope and exclusions

• Included:
  • shared license-expression aggregation fix across detection building, scanner file aggregation, and output rendering
  • targeted regression tests for preserve-structure aggregation
  • final compare artifacts:
    • .provenant/compare-runs/20260422T104059Z-fresh-39844
    • .provenant/compare-runs/20260422T104059Z-oak-39847
    • .provenant/compare-runs/20260422T103358Z-std-31214
  • Deno benchmark rows and scorecard status update
• Explicit exclusions:
  • no parser-golden, assembly-golden, or license-golden fixture writes
  • no changes to Deno parser extraction behavior beyond the shared license-expression fix exposed by denoland/std

Intentional differences from Python

• Provenant continues to surface direct Deno manifest and lockfile package data that Python ScanCode does not parse, and now preserves the full nested license-expression structure already present in matched rules during aggregation.

Follow-up work

• Created or intentionally deferred:
  • none; targeted update-license-golden -- --list-mismatches --show-diff prechecks for misc.c and complex3.java reported would update 0 file(s)

Expected-output fixture changes

• Files changed: none
• Why the new expected output is correct: the shared license-expression fix only changed live compare-output results and targeted regression tests; the narrow license-golden precheck found no checked-in fixture drift to sync.