license-compliance: Fix inaccuracies in the step-by-step description

In the depiction of the process the copyright_report.gz and $packagename_bin2sources.json got incorrectly mixed up.

Clarify the role of each mapping and how they get combined.