Figure out how to pin cargo-dist versions w/ rennovate

[jsuereth]

How to pin dependencies in cargo-dist: https://axodotdev.github.io/cargo-dist/book/ci/customizing.html#pinned-actions-commits

Need to look into how to make this work with rennovate.