Change pip to poetry (closes #119)

Poetry has a better dependency resolver.
E.g. it won't silently choose older version of the package.
That already happened to us because of cfpq-data pinning networkx

Also poetry locks transitive dependencies versions