use Attest-latest from PyPi instead of cloning directly from always-timeouting GitHub

also: use && for unit- and cramtests, since Travis does not fail when
the first test fails.