Remove dependency on pkg_resources

[jaraco]

The code currently has an implicit dependency on pkg_resources, which is satisfied by its dependency on pip (which vendors that pkg_resources). It would be nice to remove this dependency. By addressing #39, the only remaining usage of pkg_resources is on determining which package versions are already satisfied. I considered using importlib_metadata to do that, but ran into python-devs/importlib_metadata#82.