Merge pull request 'fix(ci): sync Cargo.lock after version bump so --locked steps pass' (#5) from fix/release-locked-lockfile into main

Reviewed-on: UOM/link#5

.gitea/workflows/release.yml

@@ -155,6 +155,11 @@ jobs:
           # Replace only the [package] version (the first `version = "..."`).
           sed -i -E "0,/^version = \"[^\"]+\"/s//version = \"${VERSION}\"/" "${WORKDIR}/Cargo.toml"
           grep -m1 '^version' "${WORKDIR}/Cargo.toml"
+          # Bumping the manifest version desyncs this crate's own entry in
+          # Cargo.lock, which would make the `--locked` fmt/test/build steps below
+          # fail ("cannot update the lock file ... --locked was passed"). Sync just
+          # the workspace member(s) into the lock — dependency pins are untouched.
+          cargo update --manifest-path "${WORKDIR}/Cargo.toml" --workspace
 
       # ── RUST ADAPTER: gates ──────────────────────────────────────────────
       - name: cargo fmt --check