limit setuptools version

[mishaschwartz]

Pin setuptools<82 to ensure that pkg_resources is installed (required until we upgrade to pyramid>2).

I noticed this issue when trying to test this library and I had to rebuild the python environment from scratch. The newest version of setuptools was installed which no longer contains pkg_resources. Pyramid version 1 uses pkg_resources for asset resolution (finding static files) and so the whole app breaks if that library doesn't exist.

[fmigneault]

That quick fix works for me.

Wondering if we might as well unpin pyramid>=2,<3 and apply the changes right away?

I think the main items affected by v2 are the security/authentication class refactor like:

twitcher/twitcher/basicauth.py

Lines 52 to 57 in 55e02be

	if asbool(settings.get('twitcher.basicauth', True)):
	authn_policy = BasicAuthAuthenticationPolicy(check=check_credentials, debug=True)
	authz_policy = ACLAuthorizationPolicy()
	config.set_authorization_policy(authz_policy)
	config.set_authentication_policy(authn_policy)
	config.set_root_factory(lambda request: Root())

Given: https://docs.pylonsproject.org/projects/pyramid/en/latest/whatsnew-2.0.html#upgrading-auth-20

What's weird though is that Magpie does handle pyramid>2 although it employs the same pyramid.authentication module: https://github.com/Ouranosinc/Magpie/blob/9a35799db2365b06d1a741ea26cb8e6e9d6a5cdd/magpie/security.py#L13-L16

So they are possibly deprecated, but still functional? To be tested...

[fmigneault]

I think this will be indirectly handled via #152
Since it pins higher versions of zope.sqlalchemy, and that zope itself is highly tied to pyramid itself with the setuptools/pkg_resource requirement, they are automatically handled on more recent versions.

See for comparison this PR #153 that did not pin zope like #152 does, and it encounters the same setuptools/pkg_resource problem.