Add spicedham to the requirements file

This probably should have gone in with my previous PR.
@willkg r?
This needs the sha256 line.