[regression] Moderation state can still be changed on locked entities

Tested on the latest 8.x-2.x

And I'm actually not seeing the moderation state on the locked node.

I still can't replicate the original issue but not sure hiding the moderation state is correct either.

With this MR the moderation state is present but still correctly disabled.

rebased

Let's get some test coverage here so we can be sure this works on both Drupal 9 (which we still test on) and Drupal 10. If it only works on Drupal 10 it might be time to cut a new major.

Made the recommendation in slack but maybe we do a final release for 8.x-2.x and start a 3.0.x branch. And then we can drop D9 and merge in the change for D11 ticket.

Then can add test coverage for 3.0.x