fix tar pack/unpack / installation race conditions by using owner locking

- use refactored lockfile https://github.com/rocketpack/lockfile/pull/1/files
- use the LockObjects given by lock() to unlock stuff, and 
- check if we got locks in callbacks

Locks were getting unlocked by non-lock-owners under heavy activity. Now only the keeper of the lock can unlock it (unless by force in staleness situations). This fixes a rare race-condition in installing very large projects.