Is it possible to set an Account Lockout Threshold via Group Policy but have it only apply to local accounts on member workstations and not to domain logins?
Yes, this is possible.
The Account Lockout Policy for domain users is defined by the settings in either the Default Domain Policy or the Default Domain Controllers Policy object. The documentation is unclear (see here and compare to here) as to which of these contain the domain user settings by default, and does not describe how the settings for user accounts are located in non-default configurations. It may depend upon the version of Windows Server. In any case, we can easily avoid depending on the exact behaviour.
Your member workstations should already be located in one or more OUs. If you create a group policy object and apply it to those OUs, the Account Lockout Policy settings in that GPO will take precedence over the settings in the Default Domain Policy object (if any). The Default Domain Controllers Policy object only applies to the Domain Controllers OU so they will not affect your member servers in any case.
Provided that you don't apply your GPO to the root of the domain, the Domain Controllers OU, or at the Site level, it definitely won't affect domain user accounts, even if those accounts are logging into the servers in question. (It should be possible to apply the GPO at the root of the domain and make it work, but the details are a bit complicated so I don't recommend trying it.)
I don't have now domain to test, but I think that if you apply setting locally (for example via secpol.msc) you will change this only to that machine. Of course if it's not Domain Controller.
You could change local Account Lockout Threshold using group policy by pushing startup script with "NET ACCOUNTS /LOCKOUTDURATION:XX" command (where XX is in minutes), but that would only have short term effect. When local computer is joined to a domain, it is obtaining security policy from the domain's policy or from the policy of any organizational unit that it is member of.
When you modify the security settings on your local computer using the local security policy (which NET ACCOUNTS command does), then you are directly modifying the settings on your computer. Therefore, the settings take effect immediately, but this may only be temporary. The settings will actually remain in effect on your local computer until the next refresh of Domain Group Policy security settings, when the security settings that are received from Group Policy will override your local settings wherever there are conflicts. The security settings are refreshed every 90 minutes on a workstation or server and every 5 minutes on a domain controller. The settings are also refreshed every 16 hours, whether or not there are any changes