PyPI fixes. (#1061) - Checkout submodules in the PyPI builder to make sure the OSV schema is included in the built package. - Make sure the JSON schema is included as a data file. - Add missing PyPI package dependencies. This should align with our root Pipfile. Part of #1060