Feature 10296 Pip Standardization

Creates standard template for tox.ini
Introduces 'safety' for listing upstream CVEs
Pins all versions of all upstream modules

Change-Id: I156239b97cd550c5349eb40197d85ce1a8dfde6c
Signed-off-by: beierlm <mark.beierl@canonical.com>