In a spa installation does the GFI breaker go in the disconnect box or main panel?

Either.

Trade practice will be at the tub, promotes easy and frequent testing of the GFI breaker, and the GFI does not need to protect the entire circuit.