The PostgreSQL Locking Trap That Killed Our Production API (and How We Fixed It)