Limit choice of install profiles to those on available platforms

In the create site form, platforms are properly limited, but all install profiles are present, regardless of platform access control or lock settings. When an install profile from a locked platform is chosen, "No valid choices" is displayed.

While the current behaviour does properly limit access to platforms, it is highly unintuitive. Instead, we should limit the choice of install profiles to those on available platforms.