spack.yaml should use explicit library version dependencies instead of "develop" or "upp"

[SamuelTrahanNOAA]

Description

In ci/spack.yaml, there are two problems with the github workflow

1. upp@develop - uses the spack repository's upp dependencies instead of those of the upp submodule
2. ip@develop - uses the latest ip instead of the one that is correct for this version of FV3

Solution

Provide explicit library dependency versions for all required libraries.

Alternatives

Ignore the problem and hope for the best.
Note: That alternative approach has failed.