dockerfile: install python packages in a venv under the swh user

this should prevent some caveats with packages installed from sources.