Constraints on LISA Pathfinder's self-gravity: Design requirements, estimates and testing procedures