Improve Pixi environment reproducibility and CI verification

[trushant05]

Changes:

• Sync Pixi lock file with manifest
• Update docs to use --locked flag while installing and running Pixi environment
• Pin version of ros2_control_cmake and kinematics_interface as the latest version break aic_eval local docker build
• Add Github CI to validate Pixi lock sync with manifest and update badge in README.md

Testing Instructions

1. Validate Pixi environment build with --locked flag

git clone git@github.com:intrinsic-dev/aic.git -b trushant/patch-aic-main
cd aic
pixi install --locked

2. Validate local aic_eval docker build

cd aic/docker
docker compose build eval

3. Validate local aic_model docker build

cd aic/docker
docker compose build model

4. Following through Getting Started guide and try running WaveArm policy

[iche033]

nit: suggestion to update a more descriptive PR title before merging. Otherwise looks good.