Fix default rocket icon URL for in-app

Oops, this was always broken.
Don't allow delete of inapp products (bug 977765)

- Raise ProtectedError if delete attempted
- Add test
Merge pull request #2458 from JaredKerim-Mozilla/977765

Don't allow delete of inapp products (bug 977765)