dockerfile: install python packages in a venv under the swh user
this should prevent some caveats with packages installed from sources.