Makefile.setupenv requires old carton

Makefile.setupenv looks to use `carton.lock`.