Strand separation suffices to establish a long-lived, foolproof DNA–protein lock at the Tus–Ter replication fork barrier