Add a lock tool to freeze deps with pip

[volpatto]

When working with conda (and conda-devenv), we can pin deps versions easily using conda-lock. We need an alternative to do the analogous when using pip/venv stack. The official Python docs mentions pip-tools and pipenv (which is under PyPA, the authority behind Python packaging, so this is appealing).

Choose and add one of the solutions to the template.