A spectral-timing model for ULXs in the supercritical regime