Sure.
Yet the only signal that requires CDC attention is the SCLK that's arriving to the slave. I.E, although this bus isn't synchronous to the FPGA system clock - it still has properties inherent to the protocol that we can exploit.
About the double synchronizer you mentioned in post #2.
With a lower SCLK frequency - for example: 10MHz instead of the nominal 40MHz.
The only signal that will require double sampling is the SCLK on FPGA #2.
Neither MOSI (incoming towards FPGA #2) nor MISO (incoming towards FPGA #1) require double sampling. By protocol definition they're stable when we require their value (falling egde of SCLK).
I would double sample, because in one word I'm "paranoid".
Basically I don't trust anyone else's designs, because I'm the one they always call in to fix someone else's F*** *P. That usually means both ends are suspect. Like the time I found a problem with the design I was called in to fix where the transmit side was tri-stating the output of the data intermittently a half clock cycle early, synchronous with the capture edge of the clock on an interface like SPI that has 180 phase shift between clock and data.