Lock in ScopedCallSite.Build
Change ServiceProvider's reference to the root container to be a field
Make IService also an IServiceCallSite where this is trivial
Clean up new code related to adding IServiceCallSite