Use the right files for the version being built.

Use the correct root.json file to get TUF working.
Install pycrypto and others into the bundle so TUF can verify the data
correctly.
Move json version specifications to pkg/
Closes #6385, #6378, #6376.