bindgen's output is a committed source file, so the version producing it
has to be pinned like any other input. With `bindgen = "0.72"` floating,
a patch release that changes formatting silently changes the generated
bindings.
`--locked` on the alias keeps cargo from quietly updating it when the
manifest disagrees.
Alaric Senat