Implement trusted-host configuration resolution

tools/lazaret_verify.py

@@ -247,11 +247,14 @@ def audit_dependencies(metadata: dict) -> None:
                 f"unapproved dependency source: {package['name']}",
             )
             license_expression = package.get("license") or ""
+            exceptions = set(
+                re.findall(r"\bWITH\s+([A-Za-z0-9.-]+)", license_expression)
+            )
             licenses = set(re.findall(r"[A-Za-z0-9.-]+", license_expression)) - {
                 "AND",
                 "OR",
                 "WITH",
-            }
+            } - exceptions
             require(
                 bool(licenses) and licenses <= allowed_licenses,
                 f"unapproved dependency license: {package['name']} {license_expression}",