Lock a product variant

Sets the locked flag on a product variant, preventing further modifications. The variant is first fetched to verify existence and read access, then write access to the variant's merchant is verified before setting the locked flag.