Switch buildout to use z3c.recipe.scripts to actually isolate us from system Python packages

- z3c.recipe.scripts actually isolates from system packages
- upgrade bootstrap.py to get write version of buildout
- pin buildout to less than version 2