Added python packages for things that were in vendor

- [ ] Once https://github.com/mozilla/zamboni-lib/pull/9 is merged, update vendor to the new commit.
no we don't. It's only used in a few places but it might be nice to understand better why it's used and if `os.path` is good enough.