* Update auto-closing job to also lock the PR
* Follow security best practice using env vars instead of string supplanting
* Mark the lock_reason as 'resolved' instead of 'spam' for clarity
* Rethrow the error is locking fails to prevent unnecessary swallowing for this non-blocking workflow