My recent fix for semijoin planning didn't actually work for a semijoin with a

RHS that can't be unique-ified --- join_is_legal has to check that before
deciding to build a join, else we'll have an unimplementable joinrel.
Per report from Greg Stark.