* tools/setup: do not change global state
1. download packages in the venv
2. never change global python version
* update_requirements.sh: install to system if used by comma employees
* bump pip & pipenv versions
* no --upgrade
* run pre-commmit install in venv
* for consistency
Co-authored-by: predicate@bonzo <noreply@example.com>
Co-authored-by: Willem Melching <willem.melching@gmail.com>