add Cargo.lock to .gitignore