Make use of classification and approval_status consistent between licenses endpoint and license_reports

Follow-up to !88805 (comment 968413533)

In some places we use classification and approval_status as the key for allowed and denied

The licenses endpoint uses classification for the license management page and the license_scanning_reports endpoint in the MR widgets uses approval_status