dev: use --locked when install cargo tools

[reubenmiller]

Proposed changes

Recent changes in cargo-nextest (or cargo install) require cargo install to be called with --lock when installing the tool.

Without the --lock flag, the following error is displayed

error: Nextest does not support being installed without --locked. To install nextest from source, run:
       
       cargo install --locked cargo-nextest
       
       For more, see https://nexte.st/docs/installation/from-source/.
  --> /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/locked-tripwire-0.1.1002/src/lib.rs:5:1
   |
 5 | / compile_error!(
 6 | |     "Nextest does not support being installed without --locked. To install nextest from source, run:
 7 | |
 8 | | cargo install --locked cargo-nextest
 9 | |
10 | | For more, see https://nexte.st/docs/installation/from-source/.");
   | |________________________________________________________________^

Types of changes

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Improvement (general improvements like code refactoring that doesn't explicitly fix a bug or add any new functionality)
• Documentation Update (if none of the other choices apply)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

Paste Link to the issue

Discovered on a failed test run:

• https://github.com/thin-edge/thin-edge.io/actions/runs/21351527135/job/61449117150?pr=3940

Checklist

• I have read the CONTRIBUTING doc
• I have signed the CLA (in all commits with git commit -s. You can activate automatic signing by running just prepare-dev once)
• I ran just format as mentioned in CODING_GUIDELINES
• I used just check as mentioned in CODING_GUIDELINES
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)

Further comments

[didier-wenzek]

Approved

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Robot Results

✅ Passed	❌ Failed	⏭️ Skipped	Total	Pass %	⏱️ Duration
822	0	3	822	100	2h34m23.823747s