I needed to make several changes on to make this happen:

*) instrumenting the exec calls to inject
*) shebangs where incorrectly implemented, so with venvs changing paths and these paths being important on where to install pips, i needed to rethink shebangs. instead of doing some path magic, lets extract existing instrumentation and apply it to the path.
*) consequently, the renovate test fails because suddenly these spans have an absolute paths, which is more correct anyway
*) we need to mute all things pip because PYTHONPATH would make it install somewhere else or not install packages at all because its already available
*) the sizecustomize couldnt be used anymore because that fucked over PYTHONPATH even more