ci: cleanup & reproducibility

[oech3]

• Use preinstall Rust for faster setup
• Avoid nightly Rust for reproducibility (for the case we inctoduce cache someday)
• cargo install --locked (for the case we inctoduce cache someday)
• Remove apt-get jobs from Win/macOS
• Support macOS sed

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.00%. Comparing base (59ea737) to head (eae208f).
⚠️ Report is 62 commits behind head on main.

Additional details and impacted files

@@     Coverage Diff     @@
##   main   #481   +/-   ##
===========================
===========================

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.