allow versions to be specified and locked within the recipe.

This commit allows users to lock the packages and pip_packges used to specific versions in production. By default the cookbook works as it previously did, just using the latest packages (specified by a `nil` version). Once a developer has setup a working production environment he can lock the packages to a specific working version by overriding the attributes.