Draft: feat: introduce submodule for spack

See #72 and #67 for a brief summary on:

• why do implement support for synchronizing spack source cache entries (tarballs, etc.) and some remote repository
• why we implemented it for OCI repositories (which isn't supported by current spack for sources)
• (and what we might need in the future in addition)