After approval the curate tasks read from the `published` repo to add to synclist repos, there is no read lock on the `published` repo, so the RepositoryVersion the curate tasks read from can be deleted before the curate tasks complete.

Additional locks needed.