Fix SWHID deserialization from serde_json::Deserializer::from_reader

In this case, serde_json only yields owned Strings, so <&str>::deserialize() fails. We need a visitor, which has a default implementation of visit_string that defers to visit_str, so it works.