Add requirements.txt

[yashlamba]

Realized after ec476e4 that we should explicitly pin dependencies, we were depending on setup.py which isn't good.