Lint unpinned versions in requirements.txt files

This is a new warning that flags package requirements that aren't pinned to
exact versions. This is a pretty coarse test that fits our current needs, but
it could be further generalized at the configuration level to lint for a
limited set of allowed comparison operators (beyond just ==).