Make sure process_incoming is serialized

[elprans]

inoticoming will happily call process_incoming concurrently, so make sure we're properly locking the repos to avoid corruption.