* license check CI * fix ci * check both headers and source * add SPDX identifiers * trigger on only master