chore: fix reuse lint errors for dependency files

- Add precedence override for openzeppelin-foundry-upgrades and forge-std
  to handle invalid SPDX expressions in vendored dependencies
- Add missing annotations for kms/auth-simple config files
- Add override for scripts/add-spdx-attribution.py to prevent false
  positive SPDX detection from script content

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: h4x3rotab

REUSE.toml

@@ -27,6 +27,8 @@ path = [
     "**/package-lock.json",
     "kms/auth-eth/.openzeppelin/unknown-2035.json",
     "kms/auth-mock/.oxlintrc.json",
+    "kms/auth-simple/.oxlintrc.json",
+    "kms/auth-simple/auth-config.example.json",
     "sdk/simulator/*.json",
     "sdk/go/go.sum",
     "kms/dstack-app/builder/shared/kms-pinned-packages.txt",
@@ -84,6 +86,14 @@ path = [
 SPDX-FileCopyrightText = "Copyright (c) 2024-2025 The Project Contributors"
 SPDX-License-Identifier = "Apache-2.0"
 
+# Scripts with SPDX-like content (false positive prevention)
+
+[[annotations]]
+path = "scripts/add-spdx-attribution.py"
+SPDX-FileCopyrightText = "© 2025 Phala Network <dstack@phala.network>"
+SPDX-License-Identifier = "Apache-2.0"
+precedence = "override"
+
 # Vendor code
 
 [[annotations]]
@@ -96,11 +106,13 @@ precedence = "override"
 path = "kms/auth-eth/lib/openzeppelin-foundry-upgrades/**"
 SPDX-FileCopyrightText = "NONE"
 SPDX-License-Identifier = "MIT"
+precedence = "override"
 
 [[annotations]]
 path = "kms/auth-eth/lib/forge-std/**"
 SPDX-FileCopyrightText = "NONE"
 SPDX-License-Identifier = "Apache-2.0"
+precedence = "override"
 
 [[annotations]]
 path = "tdx-attest-sys/csrc/*"