Review use of `VersionNumber`/`VersionSpec`/`Strings in compat checking

[mmiller-max]

Not sure how urgent this is, but we are not doing things quite right, e.g. when getting the compat field from a Project.toml it's set as a VersionNumber, where as actually it represents a VersionSpec (effectively a range).