cargo_vendor generated archive maintains timestamps

And maintaining the timestamps is bad because every time the target commit for a given project changes, even if the vendored dependencies do not changes the checksum of the archive changes.