firmware: lock pkg when not upgrading it
firmware: lock pkg when not upgrading it

It can be snatched from any mirror if given which is very
bad when FreeBSD repo is enabled.  A simple pkg-install
will pull in pkg and break the system.

opnsense/core,opnsense/core,opnsense/core,opnsense/core,opnsense/core,opnsense/core