amend: support amending merge changesets (issue3778)

worker: catch all exceptions, try to exit usefully/safely

lock: if we fork, ensure that only the parent releases This prevents us from having a bunch of errant worker processes all try to release a lock if a problem occurs. (Releasing the lock more than once is harmless; it's invoking the associated callbacks we want to avoid.)