block/qcow2: proper locking on bitmap add/remove paths