Limit body we are willing to deserialise

[mendess]

The previous implementation didn't allow limiting. but with axum 0.7 we can easily do this. We should investigate if we can deduce a sane limit for the body of an http request

Originally posted by @mendess in #719 (comment)