[Suggestion] Publishing `Cargo.lock` for better reproducible.

[Vanilla]

As the issues title, Cargo.toml describing dependencies in a broad sense, but they not enough precise.
Cargo.lock contains exact information about dependencies in tags or commit hash, which lock down the deps.
More info can find in Rust Book: https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html