The only thing that will mostly (but not entirely) prevent races is for the repo to retain multiple copies of the metadata and the RPMs. The simplest is to do 2. This would be best done upstream in Fedora of course, but anyone mirroring downstream can do this with `repomanage -k 2` etc. (OSTree doesn't have this problem by design)