Tighten up ahat public API.

And add build rules to make it very explict when the public API changes.

Change-Id: I2319eb2004e87957c5d040d32a109ca09a06a166
Test: m ahat-test
Test: Change public API and verify build complains.
Test: Change non-public API and verify build does not complain.
24 files changed