Cap HTTP response body size to prevent memory exhaustion via hostile remote endpoints

[tareknaser]

Cedarling's HTTP fetch paths buffer entire responses into memory with no upper bound.
A hostile or compromised remote can return an arbitrarily large body and OOM the backend.