Lock old job artifacts

Summary

We want to lock artifacts that were created prior to defaulting the locked column of the Ci::Pipeline model to :artifacts_locked.

Most (95%+) of all artifacts were created prior to this. We need to lock all the latest pipelines for every ref for every project. This needs to happen in a background migration.