add scripts to manifest
update docs for safest pip invocation