Freeze pants requirements.

This will help us avoid flaky builds in the future (some of pants's
transitive dependencies use unqualified package names).

Testing Done:
rm -fr build-support/pants.venv
./pants src/test/python:all

Reviewed at https://reviews.apache.org/r/27063/