PyPI loader

We need a PyPI loader that is, in essence, the tarball loader but capable of extracting upstream metadata that are meaningful (and specific to) PyPI.

---

Migrated from T421 (view on Phabricator)