A critical-state model for surface flux pinning in superconducting Pb-Na