add rewritten sha-based venv, leave requirements in venv