Document best practices for declaring spm_repositories

[cgrindel]

My recommendation (I need to make sure that this is documented) is to declare all of the packages that have library modules, which will be used as dependencies in your project, in a single spm_repositories. Any packages with binary/executable products that you want to use can be specified in separate spm_repositories.