dependencies: upsert and sync dependencies resolved in lockfile indexing

Created by: mrnugget

This adds the package repos to the database once lockfile indexing has finished in the background. That will cause the repository resolution to be able to resolve lockfile references to repositories.

Test plan

• Unit tests, manual testing