Install lockrun to prevent overlapping backup runs

Track the source directly in the repo, and build it on deployment.