Add ripple.[hc] from Quick SASL

• the ripple-list implementation might be useful in other ARPA2 projects, provide it in a common library.
• add SPDX tags.
• add include guards.
• document that WITHOUT_ settings must be consistent between provider and consumer.