Move locking inside update_*_branches so the puppetupdate binary locks too
Move locking inside update_*_branches so the puppetupdate binary locks too

Yelp/puppetupdate,tim-group/puppetupdate,Yelp/puppetupdate