DevRecS2 - Improve package management to lessen supply chain attack possibilities.

[TheMadBug]

This might be a bit of a side issue from the original recommendation, but in order to support DevRecS3:

Make barriers between Django apps / services more explicit, and defined.

Ability to fully disable some apps.

Look at lesser used 3rd party packages, see if they can be removed.

Make things like the variant annotation invoking code completely self contained - so in future it could be run in its own virtual environment calling over some file/network API. ( Relies on #1126 )