give zspill its own lock

68 jobs for !2766 with 1486-threadsanitizer-lock-order-inversion-potential-deadlock-dns_resolver_createfetch-vs in 42 minutes (queued for 5 seconds)
merge request