ci: lock the toolchain with download urls

mise wrote a lockfile naming versions but no urls when the tools were already
in the local cache, and the previous commit swept it up. `mise install` on a
runner then refused it — the same failure lock_toolchains exists to prevent in
a generated project, in the one repository that does not go through scaffold.

Author: nghiatruongtps