Add pip integration timeline to PEP 453

- timeline based on discussion with the 3.4 release team
  and the pip devs
- also clarified the two trust models on offer (i.e. that
  the PEP ensures trusting PyPI remains explicitly opt-in, just
  as it has always been in the past)
Tweak the proposed integration timeline