cubicweb-vcsfile #2452149 use hg subprocess instead of python api for clone/pull [done]

for licensing reasons if nothing else, we should avoid using the mercurial python api directly. at least the clone/pull parts are straightforward to move to subprocesses.

Mercurial is GPL, using direct import of the Mercurial low level modules turns vcsfile GPL, and so on.

done in<not specified>
load left0.000
closed by<not specified>