deb-build: add %lock to hold package (prevent from update)