Move to pip-tools

[RadoRado]

Looks like the improved version of pip, that's not entirely a different thing like Poetry.

Also need to look how to bump dependabot to use that - https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates#pip-and-pip-compile