Add `Cargo.lock`

[mkroening]

Even for libraries, it might make sense to have Cargo.lock in version control.

See

• Why have Cargo.lock in version control?
• fix: Change the defaults to always check-in Cargo.lock rust-lang/cargo#12382