spdx submodule version isn't synced with the French repo

[nschonni]

Dependabot is updating the git submodule, like in #1950, but the https://github.com/canada-ca/ore-ero-fr/tree/master/_data submodule is currently years behind.
This doesn't seem to have much of an impact currently, as the licenses used haven't changed for the dropdowns in quite some time.

Options:

• Try to fix the rsync or add another line in https://github.com/canada-ca/ore-ero/blob/master/.github/workflows/sync-french.yml to update the submodule after the copy
• Add Dependabot for just the submodules to the FR repo. Downside is extra notifications