[no-ci] check_spdx.py: require explicit license decisions for top-level paths and related cleanup

[rwgk]

Follow-on to PR #1897

Summary

• Enforce an explicit SPDX license identifier for every top-level directory in the repository, so new paths can't slip in without a reviewed license decision.

• Keep top-level files on an explicit default of Apache-2.0.

• Continue to accommodate special cases, but treat them as exceptions we want to minimize rather than the default mechanism.

• Update cuda_bindings/pixi.toml to LicenseRef-NVIDIA-SOFTWARE-LICENSE.

• Fix the current non-benchmark special cases by updating

  • .coveragerc
  • cuda_python_test_helpers/cuda_python_test_helpers/nvvm_bitcode.py
  • toolshed/build_static_bitcode_input.py
  • toolshed/dump_cutile_b64.py

  to Apache-2.0.

• Keep cuda_bindings/benchmarks/ as the only remaining special cases for now; those mixed-license cases will be handled in follow-on PRs (see comment below).

Technical details

• Replace the old prefix-only SPDX policy handling in toolshed/check_spdx.py with explicit TOP_LEVEL_DIRS_LICENSE_IDENTIFIERS and SPECIAL_CASE_LICENSE_IDENTIFIERS mappings.
• Normalize repo-relative paths before matching so the checker behaves consistently across platforms.
• Make the checker fail when a file lives under a top-level directory that does not have an explicit expected license.
• Apply special cases by exact path or glob pattern, with longest-match wins so narrower overrides can coexist with broader rules.
• Improve license parsing by trimming common comment suffixes and decoding with replacement so malformed bytes still produce deterministic comparisons instead of being treated as missing headers.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[danielfrg]

We agreed to move it the benchmarks to {repo}/benchmarks/{pkg} and that way we can keep the Apache license. I'll move them on my next PR for the benchmarks.

[github-actions]

Doc Preview CI
Preview removed because the pull request was closed or merged.