Disallow importing of legacy modules outside of the `legacy_tests` subdir

As we start to bring over the new implementations of driver, runtime and nvrtc, the existing tests are getting copied into a `legacy_tests` subdir.  We should then disallow the use of the legacy API outside of that directory.

This is blocked on #2384.