Remember to unlock the repo when done pulling

Otherwise this is both holding locks open unnecessarily and
leakes open file descriptors.