See #6780

Might want #4970 first, but I don't think it's blocking.

Basically, we should pin the Python version for the project on init. We should allow opt-out with --no-pin-python.