lock cache → lock target

Rip out locking logic obviated by the new emphasis on atomic writes
within the cache; ensure that only one process can be writing to a given
module in node_modules at a time. All the tests pass?
code style tweaks