quote the pip specifier

`fish` shell interprets the hash in #md5 as the start of a comment