Fix comparison of frozen sources.

We now have to store the Gemfile dependency here so that we can use it with `lock_source.can_lock?` below.

Alternatively, I could add a new method similar to `can_lock?` that takes another source instead of a dependency. I just thought of that... maybe that would be better.