Serialise bundle formula locks

- Avoid parallel `brew bundle` installs racing over recursive formula locks.
- Match `FormulaInstaller#lock` so bottle pours wait on shared build deps.
- Cover shared build-only deps in `installer_spec.rb`.