Drive the order's checkout lock from the payment round-trip
Merge request for #3611856.
A new OrderLockSubscriber (yoyaku_payment) locks the order on kessai.initiated and unlocks it on failure/cancellation; the example workflow drops n_lock/n_unlock (kept n_place on both branches, kept the action plugins). E2E asserts the new bracket.
Depends on kessai kessai.initiated (kessai #3611852); CI here goes green once that lands in kessai 1.x-dev.