proto: Give an error on incorrect redundant calls to allow_incoming_streams

In tor-proto, it would be good to give an error if a caller calls allow_incoming_streams twice on the same circuit, since that isn't something we support.

Not marking as Onion Services: MUST, since this is an API deficiency that can be later solved in a nonbreaking way.