checklocks: guard pending packet queues

The pending-packet map and cancellation FIFO share one mutex, but their
ownership is only implicit. Annotate both fields and the helper that
updates them so checklocks enforces the existing queue contract.

Revive the missing coverage from #7061 using the current generated
lockdep mutex and named queue state.

Assisted-by: Codex