add CBORReader max object limit

[britram]

CBORReader needs a way to implement object size limits (e.g., for parser DoS defense). Add a limit field to the CBORReader struct, start counting against the limit when a "top-level" read begins, and return an error when the limit is exceeded.