feat: use a file lock for oauth

[baxen]

This means that the oauth lock will be respected across processes, which is an error we see coming up somewhat regularly now