Use vendored rpmspec instead of spectool

spectool is a hacky Perl script and doesn't always work, whereas
rpmspec is part of RPM and exposes a supported interface. Since
rpmspec isn't part of older releases of RPM, we use a vendored version
to make sure it's always available.