Use --locked for cargo commands && change Cargo.toml to use crates.io

Use --locked for cargo commands && change Cargo.toml to use crates.io #2649