Now that we have pinned nimble deps, we get surprises from the nim version updates
Adds a pin-file for CI. When a dependency break something in the libp2p, we don't want for the CI to be broken on every branch, just on a "bump" branch that will update the pin-file & fix the eventual interop issue.