community/cargo-audit: use cargo fetch --locked

the 0.17.2 release tarball was missing the Cargo.lock file (one should have been provided by us then) and we have forgot to re-add --locked to the cargo fetch command since

assigned to @kpcyrd

approved this merge request

added 9 commits

• 61d9b3a8...5035410c - 8 commits from branch alpine:master
• a63758fe - community/cargo-audit: use cargo fetch --locked

Compare with previous version

merged