Introduce pipenv for dependency management

[andrewsosa]

Currently, the project uses a dump of pip freeze as requirements.txt. Introducing a Pipfile and lock file, as well as a copy of requirements.txt and requirements-dev.txt generated by pipenv lock -r [-d] would be a cleaner.