feat: Use pip-tools lock files for build environment (#40)

* Add noxfile with lock default session.
* Add pip-tools lock file to define the project environment.
* Update README to indicate use of the lock file.
* Use pip secure mode to install the lock file in CI.

Author: matthewfeickert

.github/workflows/deploy-jupyter-book.yml

@@ -19,7 +19,7 @@ jobs:
     - name: Install Python dependencies
       run: |
         python -m pip install --upgrade pip setuptools wheel
-        python -m pip --no-cache-dir install --requirement binder/requirements.txt --requirement book/requirements.txt
+        python -m pip install --no-deps --require-hashes --requirement book/requirements.lock
 
     - name: List installed Python packages
       run: |

README.md

@@ -15,8 +15,7 @@ Tutorial last given at the [April 2021 PyHEP topical meeting](https://indico.cer
 In a Python virtual environment run the following
 
 ```
-python -m pip install -r binder/requirements.txt
-python -m pip install -r book/requirements.txt
+python -m pip install --require-hashes --requirement book/requirements.lock
 ```
 
 ## Build