`--locked` should only fail if the lockfile actually changes

[charliermarsh]

In #15994 (for example), the lockfile doesn't actually change at all, but --locked fails. We need to make the lockfiles comparable.