We don't need to expose anything apart from what's necessary to run it. The internals are not for fiddling.

This also splits out LedgerBackedWriteService from SandboxIndexAndWriteService, because it's huge and mostly unrelated.

Fixes #7121.

Pull Request Checklist

• Read and understand the contribution guidelines
• Include appropriate tests
• Set a descriptive title and thorough description
• Add a reference to the issue this PR will solve, if appropriate
• Include changelog additions in one or more commit message bodies between the CHANGELOG_BEGIN and CHANGELOG_END tags
• Normal production system change, include purpose of change in description

NOTE: CI is not automatically run on non-members pull-requests for security
reasons. The reviewer will have to comment with /AzurePipelines run to
trigger the build.