dependencies: Resolve `repository_id` and `commit_bytea` values of lockfile references

Created by: efritz

Fixes #35435 (closed).

Test plan

New unit tests. Also tested on a local instance with additional wiring through graphql.