[entropy.client.package.actions] fetch: avoid potential deadlocks

Holding shared locks on other downloadable files while holding an
exclusive lock on the file to be downloaded is looking for a disaster.
Try not to hold locks on other potentially downloadable files while
holding one already.
[entropy.client.package.actions] fetch: update docstring