Cache instance lists for 1 minute when called via API

- No invalidation, but that's ok. Invalidation is hard
  because not all operations have to go through wikitech.
- This is primarily an anti DDoS measure.

Change-Id: I1b56ba9688315b5b4ca17ad527db5e8f5e9c2393