AFN: block GitLab and Heptapod instances without any public projects

These just result in a rejection from the archival moderation team.

The GitLab API sets the appropriate CORS headers for this to work.

Co-authored-by: Antoine Lambert <anlambert@softwareheritage.org>