Again, provide the mutex externally and lock it manually before
accessing the item repository API.

The code here is pretty ugly and brittle, but I hope I'm not making
things worse while touching it here. Testing shows that it all still
seems to work even on my 8 core / 16 thread laptop.