Make OpenSSL locking warnings more severe

Our git_openssl_set_locking() would ideally not exist. Make it clearer that we provide it as a last resort and you should prefer anything else.

Also add a note on the CHANGELOG, which was apparently forgotten when first changing this.