Clean git url before locking

Modifying the url inside the locked section was causing unlock() to be called with a different value than was used in lock().

In a project that transitively included the same git dependency multiple times, `npm install` was inexplicably pausing. Running with NODE_DEBUG=lockfile showed it was blocked waiting for the cache lock to become stale.