expose pip/pipenv versions in dockerfiles in a standard way

[grokspawn]

to make it more clear that these variables need to be considered and kept in sync, these should be exposed as ENV/ARG in base image/update image dockerfiles.