Bundle dependency requirements with release

We might want to include in the source distribution a locked file of requirements (e.g. requirements.txt file with all the transitive dependencies that were proven to function at the time of publishing). This file is not intended for use by the common user but it is useful, e.g., when we rely on deployments on Kubernetes clusters (especially because when pods die&restart they tend to update dependencies automatically, which can cause mismatches in dependency versions).

This change was introduced for hipscat-import and could be bubbled up to the PPT.

检查 hipscat-import 的 pull request 381 中的依赖锁定变更，然后检查此 template 如何构建其源代码分发包。添加一个 requirements 文件，将已验证的传递依赖项包含到发布的源代码分发包中，并验证它可用于 Kubernetes 重启等部署场景。