Describe the problem

Relates to discussion on #105366. The external linter produced a txt file listing potentially unsafe locks. This issue tracks the work to assess and fix any unsafe locks. Any existing unlocks that aren't deferred but are deemed safe should add the nolint:deferunlock comment which will be introduced in #107577 since the linter will catch any of those usages and error on build.

#107665 fixed usages in the sql package but there are still many other places that need to be assessed.

Jira issue: CRDB-30267