Repository configurations

[ttuegel]

We should support persistent repository configurations allowing the user to do things like:

• specify the repository's upstream URL
• disable specific packages
• pin packages and recipes to certain versions