pfsync: add missing bucket lock

pfsync_q_ins() expects us to hold the bucket lock, but when we enter it
from pfsync_state_import() we don't.

MFC after: 2 weeks

(cherry picked from commit 0ed5f66c5ad23a6fe02d60765acf5e5e00957542)