Add `--lock-source-repo` to the integration tests

[dylan-smith]

We should have the integration tests lock the source repo, and add some asserts to make sure it's properly locked.