[RFC PATCH nixpkgs 4/9] crosvm.updateScript: don't vendor Cargo.lock