chore: spack-v0.22.1

Includes some git CVE fixes, https://github.blog/2024-05-14-securing-git-addressing-5-new-vulnerabilities/, as well as non-package-related fixes to spack itself, full list at https://github.com/spack/spack/releases/tag/v0.22.1 (several affect us, some requested by us).

containers/jug/dev.Dockerfile

@@ -130,8 +130,6 @@ git -C ${KEY4HEPSPACK_ROOT} checkout ${KEY4HEPSPACK_VERSION}
 spack repo add --scope site "${KEY4HEPSPACK_ROOT}"
 EOF
 
-## Workaround for xrootd server, https://github.com/xrootd/xrootd/issues/2295
-ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /etc/ssl/certs/InCommon\ RSA\ Server\ CA\ 2.pem
 
 ## ========================================================================================
 ## STAGE1: builder
@@ -155,6 +153,7 @@ find /var/cache/spack/blobs/sha256/ -ignore_readdir_race -atime +7 -delete
 echo -e "\n  view: false" >> ${SPACK_ENV}/spack.yaml
 spack env activate --dir ${SPACK_ENV}
 spack concretize --fresh --force
+spack spec
 make --jobs ${jobs} --keep-going --directory /opt/spack-environment \
   SPACK_ENV=${SPACK_ENV} \
   BUILDCACHE_OCI_PROMPT="eicweb" \
@@ -207,6 +206,7 @@ if [ "${JUGGLER_VERSION}" != "df87bf1f8643afa8e80bece9d36d6dc26dfe8132" ] ; then
   spack deconcretize -y --all juggler
 fi
 spack concretize --fresh --force
+spack spec
 make --jobs ${jobs} --keep-going --directory /opt/spack-environment \
   SPACK_ENV=${SPACK_ENV} \
   BUILDCACHE_OCI_FINAL="eicweb"