we build a pex that lives on a remote artifact store (http), then have a pants wrapper script that checks a committed version in the repo to bootstrap that when you run ./pants