Pin all dependencies to an exact version

[ojeda]

To ensure reproducible builds and no unintended updates even if a developer runs cargo on their own without one of the locking flags, pin all dependencies to an exact version, explicitly managing them from now on:

• bitflags is missing the minor and the patch number.
• bindgen is missing the patch number.