Recover menpofit as part of the menpo-removal fiasco

This MR brings back menpofit, which is still used by bob.ip.facelandmarks.

The failing nightlies point out this fact: https://gitlab.idiap.ch/bob/bob.nightlies/-/jobs/170105

The reason we have not noticed this before is that we removed the package from here, but kept using it through the above cited package.

We also did not remove traces of it from our build config.