Add Cargo.lock to the repo

to have last snapshot of all dependencies' versions known to work.