Fix missing Spring and OW2 attributions in shaded JAR

[skytin1004]

Purpose of the pull request

Closed: #1172

Add the missing copyright attribution for the Spring and ASM code bundled in fesod-shaded, and keep the standalone ASM license used by the source distribution consistent.

What's changed?

• Added the Pivotal copyright line to fesod-shaded's META-INF/NOTICE.
• Added the OW2 Consortium copyright line to fesod-shaded's META-INF/LICENSE.
• Added the same OW2 attribution to dist/licenses/LICENSE-asm.txt, which is included in the source release ZIP.
• Kept the OW2 attribution in the same position as the original spring-core 5.3.39 license and preserved the existing LF/EOF style.

Validation

• Ran ./mvnw clean package -Papache-release -DskipTests -Dgpg.skip=true.
• Scanned all 870 tracked files for other ASM and Spring attribution copies; no additional missing attribution was found.
• Verified every generated JAR and the source release ZIP contains the expected updated LICENSE and NOTICE entries.
• Confirmed the shaded JAR contains the expected 35 ASM and 254 cglib classes from spring-core 5.3.39, with no Objenesis or unexpected third-party classes.
• Ran git diff --check and verified all three changed files use LF line endings.

Checklist

• I have read the Contributor Guide.
• I have updated the required NOTICE/LICENSE entries.
• The release-profile build passes.

[skytin1004]

I did another pass through the repository and found one additional copy of the ASM license in dist/licenses/LICENSE-asm.txt, which is included in the source release. I've added the missing OW2 attribution there as well. I also rebuilt the release artifacts and confirmed the updated license and notice files are included. I didn’t find any other missing copies.