Add Cargo.lock to the repo root

[houqp]

Is your feature request related to a problem or challenge? Please describe what you are trying to do.

Builds are not reproducible for datafusion python binding and ballista. Most recently, we got hit by #961.

A Cargo.lock will be useful for projects like datafusion python binding and ballista since they both produce binaries. Right now, our source releases are not reproducible for these two subprojects because we don't ship a lock file to pin dependencies to exact versions. This means if users use our official source release to build binaries, their output could be different than the ones we tested when prepping for the release.

Describe the solution you'd like

Check in Cargo.lock file into the repo.

Additional context

See official guide lines at https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html.