Add cart lock state.

It was missing from the state-machine.yml
Merge pull request #2265 from kayue/patch-1

Add back missing cart_locked state.