Added python packages for things that were in vendor

- [ ] Once https://github.com/mozilla/zamboni-lib/pull/9 is merged, update vendor to the new commit.
do we have a bug on file to remove this dependency? `os` is good enough.