ls-apis test should ensure we don't ship any unexpected consumers of the nexus-lockstep API

[iliana]

The nexus-lockstep API landing in #8983 must not be used by anything other than omdb or RSS. Add checks (and the necessary exceptions).