build: tight control over Python dependencies

[fortaa]

Use PDM for that purpose.

Issue: TBD

[github-actions]

MLCommons CLA bot:
Thank you very much for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the MLCommons CLA (Apache 2). Please use this [Google form] (https://forms.gle/Ew1KkBVpyeJDuRw67) to initiate authorization. If you are from an MLCommons member organization, we will request that you be added to the CLA. If you are not from a member organization, we will email you a CLA to sign. For any questions, please contact support@mlcommons.org.
0 out of 1 committers have signed the MLCommons CLA.
❌ @fortaa
_{You can retrigger this bot by commenting recheck in this Pull Request}

[FileSystemGuy]

Hi,

You submitted this PR against the MLPerf Storage repo, and we're very glad for your contribution, but I'd like to ask a few questions if you don't mind.

We need to know that you (and/or your employer) grant us a license to use the code changes you've offered. Could you please let us know...?

Thanks,
Curtis
(Co-Chair of MLPerf Storage)

[FileSystemGuy]

Just checking in again. We'd very much like your contribution to be added to our repo, but we cannot do that until/unless we know that you are granting MLCommons a license to use the code changes you suggested. Please let us know...

[fortaa]

Hi there,

The section 5 of your license applies here, doesn't it?