Fix SWHID deserialization from serde_json::Deserializer::from_reader

In this case, serde_json only yields owned Strings, so
`<&str>::deserialize()` fails. We need a visitor, which has a default
implementation of visit_string that defers to visit_str, so it works.