Use pip install --no-index --upgrade everywhere

--upgrade will make sure the newest code is installed when Chef recipes
are re-executed, and --no-index will prevent contacting PyPI.