ci: prevent cargo metadata from fetching or updating lockfile

[TheButlah]

cargo metadata will download crates and also update the lockfile. This is undesirable for how we are using it in CI. This PR fixes this behavior by only fetching metadata for workspace members and freezing the lockfile.

Release runs 17s faster and regular test job runs 10s faster.