Use a ZipFile as the get-pip.py script

Previously get-pip.py was a hacky script that included compressed
base64 encoded pickled files that represented an installed pip. It
extracted these files into the temporary location and then executed
that unpacked pip in order to install pip and setuptools from PyPI.

This changes it so that get-pip.py is a small wrapper script
that contains a base64 encoded zip script inside of it. This
wrapper script will decode the zip script, write it to a
temporary location, and then execute it directly. The zip script
itself will unpack cacert.pem to a temporary location so that
the TLS connection to PyPI can be validated.

This should represent no change in behavior for users of get-pip.py
however it should push the trouble of the bulk of the implementation
onto the Python install instead of trying to do this ourselves.

The one important behavior change for packagers is that this will
no longer package an *installed* pip, but will instead package the
version that has been checked out. I believe this is more obvious
and what a packager would expect to happen anyways.