Installs tox for use with subs

Also refactored so jenkins-jobs installs it's own deps from
inside default.rb vs trying to finagle it via roles.
    
Will require an update to chef-repo/roles/ci-ops.json.