Split the JSON / SPDX 3 canonical serialization to a library

[bact]

Put together all necessary JSON canonicalization and SPDX 3 element sorting.

See also
#29

Still need to account for imports and namespaces