GCS backed tracked package list

[wbxyz]

The current deployment of pypi RSS uses a benchmark file to describe the tracked package set. This is strange because the benchmark file includes pinned versions. It also makes it harder to update the tracked packages set while continuing to run the RSS subscriber.

We should place out tracked package configuration in a GCS bucket that can be fetched and cached by release subscribers.