Since pip is in no way critical to Gentoo, we should be able to easily unvendor all the deps.
This is a proper nightmare. Out of bundled dependencies, the following seem to be direct dependencies of pip: cachecontrol certifi colorama distlib distro html5lib packaging pep517 pkg_resources platformdirs progress requests resolvelib rich six tenacity tomli urllib3 Out of these, we need to package cachecontrol again.
