[RFC PATCH nixpkgs v2 4/9] crosvm.updateScript: don't vendor Cargo.lock