Fixes Windows CI failure caused by libz-sys v1.1.26 resolving with missing vendored zlib sources. Pinning via lockfile prevents future surprise dependency breakage.
