chore: spack-v0.22.1

Includes some git CVE fixes, https://github.blog/2024-05-14-securing-git-addressing-5-new-vulnerabilities/, as well as non-package-related fixes to spack itself, full list at https://github.com/spack/spack/releases/tag/v0.22.1 (several affect us, some requested by us).

containers/jug/dev.Dockerfile

@@ -131,7 +131,9 @@ spack repo add --scope site "${KEY4HEPSPACK_ROOT}"
 EOF
 
 ## Workaround for xrootd server, https://github.com/xrootd/xrootd/issues/2295
-ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /etc/ssl/certs/InCommon\ RSA\ Server\ CA\ 2.pem
+ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.pem
+RUN openssl x509 -outform der -in /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.pem -out /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.crt
+RUN update-ca-certificates
 
 ## ========================================================================================
 ## STAGE1: builder