ZSH: use pip in venv only