Reliability: Make sure onion services don't publish until they have (nearly) all hsdirs' descriptors

Based on my analysis in legacy/trac#23170 (moved), onion service directories should be much more reliable when the services make sure that they have all (or nearly all) the hsdirs' descriptors before they upload.