Pip 26.2: –only-deps solves 16 years of app deployment hacks