BLD: fix versions of setuptools/pip/wheel to be stable and know to work