Ensure only one refresh is running for a user/resource at a time

[jefferai]

trafficstars

This ensures we don't have competing update processes running. When doing the inline RefreshForSearch, a specific error will be returned so we can hint in the API that we're in the middle of a refresh.