[backend] do not publish locked projects or packages
[backend] remove repository meta data when no architecture has a prepared :repo directory