This way we can update pip independently before installing the rest, and avoid installing codecov (and thus coverage which attempts to build C extension) where it's not needed.