3. Check for recovery required in workspace startup code -- see FIX in
   Workspace.c 

4. Establish a lock around workspace file while running.

5. Have in-memory PendingChange structure carry it's own process and
   branch objects. We don't want to keep fetching these (in fact they
   might change), because they cannot be reliably cached locally.

Done:

1. Make all of the serialize routines export a format version number

2. Make sure that all trueNames are stored with xstrdup
