feat: Use pip-tools lock files for build environment

[matthewfeickert]

Resolves #38

* Add noxfile with lock default session.
* Add pip-tools lock file to define the project environment.
* Update README to indicate use of the lock file.
* Use pip secure mode to install the lock file in CI.

This will guard the project from getting broken by updates in jupyter-book.