spec: use constant filename for source tarball

This avoids filling up the OSB repo with new files for every build.
spec: mark version with @VERSION@

This is so we can replace it in the build script.