Added missing -y flag
Pin PIP requirements

This makes it easier for browsers of the repo to see exactly what
version is installed in the current build.

It also gives us a way to trigger new builds when a new Wagtail update
is released.