This is the recommended best practice for binaries, we should do it for `cargo-3ds` as well. A side effect of this is that we should test build and installation with the exact Cargo.lock dependencies with `--locked`.