Improve CI

[dbaynard]

At least I should add caching. Alternatively (or, perhaps, in addition) I can convert to using nix — the latter might be a worthwhile exercise, or if I want to automate releases.

Ah, I should also add --locked to ensure the Cargo.lock is up to date.