When I put pants on our ops-y python code I mostly made wrapper scripts in the existing structure that would magically invoke run or use a PEX if present. While good for backwards compatibility our existing structure was pretty haphazard (is it a "tool" or "script"?)