Support multiple license sources per rule violation

[MarcelBochtler]

In ORT rule violations were changed, so a single rule violation can list multiple license sources 1.

While the ORT Server stores all license sources in the database (see 2), the API and therefore the UI only support a single license source per rule violation.

See also:
#4126