Create container with fixed spack and base dependency versions

[streeve]

Note this is different than #4 which is discussing fixed --package-- versioning

Nightly builds: use latest dependencies as a canary check against failures
CI for PR builds: use fixed dependencies to make sure the failures are only from the code itself