robust python invocation

[combatopera]

currently the way python is invoked so that it has the same dependencies is a bit hacky. come up with a reusable way of doing that, paying particular attention to the various kinds of magic first sys.path entry