We should support persistent repository configurations allowing the user to do things like: - specify the repository's upstream URL - disable specific packages - pin packages and recipes to certain versions