pip_parse: lockfile for build dependencies in repository rule

Since [PEP 518](https://peps.python.org/pep-0518/) projects can specify their build system requirements in their pyproject.toml file. Currently this is not included in the pip-compile and therefore can lead to non-reproducible issues. This happened in the wild today because pyyaml depends on cython but didn't pin its major version, so when cython pushed an incompatible version this broke if you were including it in bazel. One of the potential workarounds is to install the compatible cython version in the venv _before_ installing your requirements, which I also don't believe is possible. I believe supporting this would require pip-tools to also support this option, which is potentially implemented by https://github.com/jazzband/pip-tools/pull/1681

首先检查 pip_parse 仓库规则当前的 pip-compile 流程以及所引用的 pip-tools pull request #1681。确定应如何包含 pyproject.toml 中的构建系统要求，并在这些依赖项已针对仓库构建以可复现的方式锁定后，视为工作完成。

由索引模型根据 Issue 内容生成。