Lock tracker via REST API

In the UI a tracker can be locked by a user for exclusive access, but this is not possible via REST API.

Use case:

The items of a tracker are modified outside the UI, e.g. to generate a item skeleton. This operation must be performed atomic, i.e. it must be prevented that someone else modifies any item of the tracker while the external modifications are done.