chore: spack-v0.22.1

Includes some git CVE fixes, https://github.blog/2024-05-14-securing-git-addressing-5-new-vulnerabilities/, as well as non-package-related fixes to spack itself, full list at https://github.com/spack/spack/releases/tag/v0.22.1 (several affect us, some requested by us).

spack.sh

@@ -15,6 +15,7 @@ f6d50f790ee8b123f7775429f6ca6394170e6de9
 85f13442d2a7486daba81fdd9a3b6a1182ba11f6
 f73d7d2dce226857cbc774e942454bad2992969e
 cbab451c1a342523ed75e9be1098615a597a9b59
+0726513334618998c717f65d1d276ba385adbd1b
 ---
 ## Optional hash table with comma-separated file list
 read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
@@ -29,3 +30,4 @@ read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
 ## 85f13442d2a7486daba81fdd9a3b6a1182ba11f6: Consolidate concretization output for environments
 ## f73d7d2dce226857cbc774e942454bad2992969e: dd4hep: cleanup recipe, remove deprecated versions and patches
 ## cbab451c1a342523ed75e9be1098615a597a9b59: dd4hep: Add version 1.29
+## 0726513334618998c717f65d1d276ba385adbd1b: gettext: Fix unvendor libxml2