Creates standard template for tox.ini
Introduces 'safety' for listing upstream CVEs
Pins all versions of all upstream modules
Removes Makefile step and places all build logic into tox.ini
Change-Id: Ic14321bd5bddb322db08ac3e25202cc64cac2dff Signed-off-by: David Garcia <david.garcia@canonical.com>