Check in CI that `Cargo.lock` is up-to-date

[isomorpheme]

See #26 for a case where CI didn't check this.

It probably suffices to check that it is unchanged after e.g. cargo build.