docs(readme): add --locked flag to cargo install command

CONTRIBUTING.md

@@ -140,7 +140,7 @@ cargo test --test <test_file>
 Reproduce the benchmark regression gate locally without checking out `main` in place:
 
 ```bash
-cargo install critcmp --version 0.1.7
+cargo install --locked critcmp --version 0.1.7
 bash scripts/check_benchmark_regressions.sh
 ```
 
@@ -162,7 +162,7 @@ Fuzzing helps discover crashes and panics in critical code paths like WASM parsi
 **Prerequisites:**
 Install `cargo-fuzz`:
 ```bash
-cargo install cargo-fuzz
+cargo install --locked cargo-fuzz
 ```
 
 **Running a fuzz target:**

Readme.md

@@ -28,14 +28,16 @@ A command-line debugger for Soroban smart contracts on the Stellar network. Debu
 
 #### Using Cargo (Recommended)
 ```bash
-cargo install soroban-debugger
+cargo install --locked soroban-debugger
 ```
 
+> The `--locked` flag pins dependency versions to those tested by the maintainers, ensuring a reproducible install.
+
 #### From Source
 ```bash
 git clone https://github.com/Timi16/soroban-debugger.git
 cd soroban-debugger
-cargo install --path .
+cargo install --locked --path .
 ```
 
 ### 2. Your First Debug Run

docs/getting-started.md

@@ -12,7 +12,7 @@ If you have Rust installed, you can install the debugger directly from source or
 
 ```bash
 # Install from crates.io
-cargo install soroban-debugger
+cargo install --locked soroban-debugger
 ```
 
 ### Option B: Download Pre-built Binaries

docs/tutorials/first-debug.md

@@ -16,7 +16,7 @@ To step through Soroban WebAssembly (WASM) execution, you need the Soroban debug
 Install it via Cargo by running the following command in your terminal:
 
 ```bash
-cargo install soroban-debugger
+cargo install --locked soroban-debugger
 ```
 
 Verify the installation was successful by checking the version: