Integrate with url-arbiter

This changes the ownership check to use url-arbiter instead of a local check.

This is feature-flagged (url-arbiter isn't in production yet), and when disabled the original check still applies.
Yeah, I  wasn't sure of a better name.  Maybe `find_artefact_or_build_blank_artefact`?