Guard against overriding google play track to "live" track

[mitchhentges]

This only applies to apps where Relman is involved, and apps are automatically pushed to an "internal" track, after which Relman manually promotes them to the "public" track.

• Require that the "public" track is set in config
• If the google_play_track override is set to the "public" track, fail the build