Pin Bot Dependencies

Pin versions for anything the bot installs or calls.

Put the pin list where the bot reads standing rules.

See Using Open Source with Your Bots for upgrade rhythm.