Refuse to delete project that still has VMs

Server deletion in OpenStack is asynchronous and takes a lot of time,
so to avoid races we decided to refuse deleting projects instead
of trying to clean them up.

Change-Id: I01c3732bc85aa3280654691236b70ac7eff59871