Unfortunately, locking (and unlocking) it wipes user data, so it should be relocked right after installation of GrapheneOS.
Also can Graphene still update if the bootloader is locked?
Yes, it can still update just fine. It installs its own certificate at install time and all updates are signed with it.