Use pip requirements file, pin versions and add hashes

[barney-s]

Change description

Pin pip package version with hashes
Use a requirements file

Docker build is failing with:

 Collecting pip
#7 2.263 ERROR: In --require-hashes mode, all requirements must have their versions pinned with ==. These do not:
#7 2.263     pip from https://files.pythonhosted.org/packages/8a/6a/19e9fe04fca059ccf770861c7d5721ab4c2aebc539889e97c7977528a53b/pip-24.0-py3-none-any.whl
#7 2.452 
#7 2.452 [notice] A new release of pip is available: 23.0.1 -> 24.0
#7 2.452 [notice] To update, run: pip install --upgrade pip
#7 ERROR: executor failed running [/bin/sh -c pip install --require-hashes --upgrade pip]: exit code: 1

[barney-s]

/lgtm
/approve

[google-oss-prow]

@barney-s: you cannot LGTM your own PR.

In response to this:

/lgtm
/approve

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[cheftako]

/lgtm
/approve

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: barney-s, cheftako

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [barney-s,cheftako]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment