Improve CI

At least I should add caching. Alternatively (or, perhaps, in addition) I can convert to using nix — the latter might be a worthwhile exercise, or if I want to automate releases.

Ah, I should also add `--locked` to ensure the `Cargo.lock` is up to date.