Must stick with 5V.
Ok, what about:
74LVC125 for driving the MOSI, SCK, SD_SS, and possibly RTC_SS in the outgoing direction. It tolerates 5.5V and can have its VCC connected to 3.3V.
Then in the other direction, I found a single SN74AHCT1G125DBVR for MISO. It is a TTL part so it should go high at 2V and can be powered at 5V.
The SN74AHCT1G125DBVR also has an OE that could be connected to SD_SS from the AVR so it would only have its output active when the SD is selected with SD_SS.
Then I could put the RTC on the 5V side. Or it could be put on the 3.3V side if that OE was just tied low all the time. Any benefit either way?