Refactor: tools: use a flag to indicate locked resources in crm_resource

... to make the handling consistent with other checks. This also allows some of
the code to be simplified.