Vendored image-spec should be private

[sudo-bmitch]

There's no need to export these types. They are internal, for testing only.