Support for aliases and anchors

- bump spiff version
- fix anchor/alias support via CandiedYAML
- update other deps