build: Use Cargo.lock included with the repo by default

This fixes failed meson builds on byzantium due to dependencies racing away.

It uses Cargo.lock for default builds, so PureOS users will get a working build without tinkering.