Use only one state -- locked.

But use transition, which are able to store open_order_url, if found.

Expose lock and unlock transition, which will selectively use correct helper
transitions with or without storing open_order_url.