Locking is not re-entrant, so these are useful if we need to find things while we already lock the strctures
We need to fetch repositories so that we can have package data. We only need to fetch one set of results per project, not all repos.
OBS has issues searching for packages in scmsynced projects. Since we have a list of all the repositories, we can allow for a search endpoint here. /search?q=term1&q=term2... results is JSON [ project1/pkgA, project2/pkgB ]